Tag: Storm-1811

Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Posted on

The Cardinal cybercrime group (aka Storm-1811, UNC4393), which operates the Black Basta ransomware, may have been exploiting a recently patched Windows privilege escalation vulnerability as a zero-day. The vulnerability (CVE-2024-26169) occurs in the Windows Error Reporting Service. If exploited on Read More …

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware

Posted on

Since mid-April 2024, Microsoft Threat Intelligence has observed the threat actor Storm-1811 misusing the client management tool Quick Assist to target users in social engineering attacks. Storm-1811 is a financially motivated cybercriminal group known to deploy Black Basta ransomware. The Read More …