A recent report by researchers at Rapid7 has revealed that a group of cybercriminals linked to Black Basta has shifted their tactics, now distributing the malicious ZBOT and DarkGate programs since October 2024. According to the data, these attackers are actively engaging in social engineering methods, such as bombarding victims’ email inboxes in order to establish contact.
The attack strategy starts with overwhelming the victim’s mailbox by signing up their email address for numerous mailing services. Subsequently, the attackers reach out to the victims, frequently posing as technical support personnel.
/Reports, release notes, official announcements.