THREAT ACTORS MISUSING QUICK ASSIST IN SOCIAL ENGINEERING ATTACKS LEADING TO RANSOMWARE

Summary from the TLDR InfoSec newsletter

Microsoft has observed a cybercriminal group called Storm-1811 abusing Quick Assist for social engineering attacks to deploy Black Basta ransomware. The group uses voice phishing to trick victims into installing remote management tools, followed by QakBot, Cobalt Strike, and ultimately the ransomware.