Threat actors misusing Quick Assist in social engineering attacks leading to ransomware (www.microsoft.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 16 May 2024 11:55
https://sh.itjust.works/post/19377863

#cybersecurity

threaded - newest

Brkdncr@lemmy.world on 16 May 2024 12:53 collapse

This is a simple case of a malicious actor asking for access, and the victim is handing access over. QuickAssist, ScreenConnect, TeamViewer, Teams, Zoom, etc all have been used for this purpose.

It no sounds like it starts with a vishing phone call. Lots of people will ask Microsoft to fix this somehow, but no one ever seems to blame the phone services or demand they fix it.

rmuk@feddit.uk on 16 May 2024 18:15 collapse

Couldn’t agree more. I have no idea why phone companies are not being held accountable for allowing this. For email, it’s a solved problem. Why not phone?