Black Basta spreading ransomware disguised as IT support
Black Basta has been wearing a Microsoft Teams IT support disguise to infiltrate enterprise systems, sending thousands of emails to employees and posing as helpdesk staff to gain remote access. The ransomware group counts Southern Water and Capita among its victims and is causing significant financial losses. ReliaQuest discovered the scheme and advises firms to block malicious domains, disable external communications in Teams and mitigate the threat through enhanced spam policies.
Full Story: BleepingComputer (10/25)