Quick Assist (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3)
Quick Assist is a built-in Windows utility that can be used to grant external users remote access to a particular system. Financially motivated adversaries abused Quick Assist during an April 2024 campaign that in some cases led to Black Basta ransomware deployment.[Microsoft Security Blog 5 15 2024]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Quick Assist (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) | Tidal Software | Black Basta Affiliates (7f52cadb-7a12-4b9d-9290-1ef02123fbe4) | Tidal Groups | 1 |
| Quick Assist (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) | Tidal Software | Private Cluster (ee2da206-2532-44e3-a343-d66e9bfdbca0) | Unknown | 1 |