stac5143 – PossibleThreat Articles

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

January 21, 2025 0 Comments black basta, featured, Fin7, java malware, legitimate service abuse, microsoft office 365, python malware, quick assist, remote machine management, security operations, stac5143, stac5777, teams, threat research

Credit to Author: gallagherseanm| Date: Tue, 21 Jan 2025 11:30:14 +0000

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware.