Former members tied to the Black Basta ransomware operation have been noticed sticking to their tried-and-tested method of electronic mail bombing and Microsoft Groups phishing to ascertain persistent entry to focus on networks.
“Just lately, attackers have launched Python script execution alongside these strategies, utilizing cURL requests to fetch and deploy malicious payloads,” ReliaQuest stated in a report
Former Black Basta Members Use Microsoft Groups and Python Scripts in 2025 Assaults
