Spam floods precede fake IT-support chats in Microsoft Teams
Arctic Wolf documented more than 400 cases; remote-access tools can be installed in under 15 minutes, sometimes leading to ransomware.
64
Threat actor
Black Basta
- Mentions · 7d2
- Mentions · 30d3
- All mentions6
- First seenAug 17, 2026
- Last mentioned3d ago
Timeline
6 articles · newest firstAttackers abuse Teams external chat to breach organizations quickly
Arctic Wolf saw more than 400 cases, often with email bombing and Quick Assist, and did not name the operators.
76
From Access to Exfiltration: What Defenders Need to Know
Zscaler ThreatLabz reports ransomware data theft surged 275.8% to 896.2TB, with exfiltration-focused extortion outpacing encryption-centric defenses.
52
Conti ransomware gang member sentenced to 4 years in prison
US court sentences Ukrainian Conti ransomware member Oleksii Lytvynenko to four years; the gang extorted over $150M from 1,000+ victims.
35
Conti ransomware crew member sentenced to four years in prison
Ukrainian national Oleksii Lytvynenko sentenced to four years in the US for his role in Conti ransomware attacks on at least 12 companies.
45
Blackbasta Ransomwares Ties Russia
Infosecurity Magazine examines the Black Basta ransomware group's ties to Russia, informing attribution of the cybercrime operation.
50
Appears with
- Microsoft Teamsproduct · 2
- Arctic Wolforganization · 2
- ScreenConnectproduct · 2
- Quick Assistproduct · 2
- FBIorganization · 2
- Microsoftvendor · 2
- US Department of Justiceorganization · 2
- AnyDeskproduct · 2
- Contithreat actor · 2
- US Department of Justicevendor · 1
- An Garda Síochánaorganization · 1
- Cactusthreat actor · 1
- BlackSuitthreat actor · 1
- FBIvendor · 1
- Embargothreat actor · 1
- Zeonthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.