Windows Quick Assist is a tool tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed March 10, 2026; most recent activity April 20, 2026.
A resurgence of cyber attacks has been linked to former affiliates of the defunct Black Basta ransomware group, focusing on senior executives across various sectors. Recent reports indicate that from March 1 to April 1,…
Cyber attackers are increasingly using Microsoft Teams to impersonate IT helpdesk staff, employing social engineering tactics to gain remote access to enterprise systems. This method, known as 'cross-tenant helpdesk…
Hackers are targeting employees in financial and healthcare sectors through Microsoft Teams, using social engineering tactics to gain remote access via Windows Quick Assist. The attackers deploy a new malware family…