Inbox Flood, Then ‘IT’ on Teams: 400 Cases End in Remote Control
Arctic Wolf has seen more than 400 incidents where attackers mail-bomb a user, pose as IT on Microsoft Teams and get remote access via Quick Assist, a path to Black Basta, Cactus and Chaos ransomware.