Black Basta ransomware affiliates have adapted their methodology by using Microsoft Teams to trick employees into giving them access to networks. The cybercriminals pose as corporate help desks, offer assistance with a fake ongoing spam issue, and encourage the downloading of remote monitoring tools, providing initial access to deploy ransomware. Initial observations show a high volume of messages sent to potential victims, and also suggest that the operations originate from Russia.

'I'm not a robot' malware scam weaponizes CAPTCHA verification tests against users – New York Post
‘I’m not a robot’ malware scam weaponizes CAPTCHA verification tests against users New York Post


