logo

Teams Vishing Ransomware

Threat actors impersonate IT via email-bombing and Microsoft Teams vishing to coerce victims into granting remote access (Quick Assist/AnyDesk), deploy loaders and RMM/tools (Qakbot, Cobalt Strike, SystemBC, etc.), and ultimately deliver Black Basta ransomware.

List of posts related to this topic

Post TitleDate PublishedDescribes IncidentFeed
Hackers Use Microsoft Teams-Themed Lures to Deploy Legitimate Remote Access Software2026-06-24TrueGBHackers
Not Subscribed
New Microsoft Teams Vishing Attack Exploits Quick Assist to Deploy Stealthy Malware2026-06-04Truesecurityonline.info
Not Subscribed
Hackers Abuse Microsoft Teams Chats After Flooding Victims With Spam Emails2026-05-04TrueCyber Press
Not Subscribed
Email Bombing and Fake IT Support Calls Fuel New Microsoft Teams Phishing Attacks2026-05-04TruecybersecurityNews.com
Not Subscribed
Hackers Impersonate IT Help Desk on Microsoft Teams to Gain Access, Steal Data2026-04-22TrueTechRepublic Security
Not Subscribed
Attackers Abuse Microsoft Teams and Quick Assist in New Helpdesk Impersonation Attack Chain2026-04-20TruecybersecurityNews.com
Not Subscribed
Microsoft: Teams increasingly abused in helpdesk impersonation attacks2026-04-20TrueBleeping Computer
Not Subscribed
Hackers Attack Employees Over Microsoft Teams to Trick Them Into Granting Remote Access2026-03-10TruecybersecurityNews.com
Not Subscribed
Ransomware gangs pose as IT support in Microsoft Teams phishing attacks2025-01-21TrueBleeping Computer
Not Subscribed
Russian Ransomware Groups Deploy Email Bombing and Teams Vishing 2025-01-21TrueInfosecurity Magazine (News)
Not Subscribed
Uptick in Social Engineering Campaign Deploying Black Basta Ransomware2024-12-19TrueArctic Wolf Blog
Not Subscribed
Black Basta ransomware poses as IT support on Microsoft Teams to breach networks2024-10-25TrueBleeping Computer
Not Subscribed
Black Basta Ransomware Group Affiliates Leveraging Windows Quick Assist for Initial Access2024-06-17TrueArctic Wolf Blog
Not Subscribed
Windows Quick Assist Anchors Black Basta Ransomware Gambit2024-05-16TrueDark Reading
Not Subscribed
Threat actors misusing Quick Assist in social engineering attacks leading to ransomware2024-05-15TrueMicrosoft Security
Not Subscribed
New Black Basta Social Engineering Scheme2024-05-15TrueReliaQuest Blog
Not Subscribed
500 Victims In, Black Basta Reinvents With Novel Vishing Strategy2024-05-13TrueDark Reading
Not Subscribed

1–17 of 17