Skip to content

Hide Navigation Hide TOC

Quick Assist (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3)

Quick Assist is a built-in Windows utility that can be used to grant external users remote access to a particular system. Financially motivated adversaries abused Quick Assist during an April 2024 campaign that in some cases led to Black Basta ransomware deployment.[Microsoft Security Blog 5 15 2024]

Cluster A Galaxy A Cluster B Galaxy B Level
Quick Assist (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) Tidal Software Black Basta Affiliates (7f52cadb-7a12-4b9d-9290-1ef02123fbe4) Tidal Groups 1
Quick Assist (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) Tidal Software Storm-1811 (ee2da206-2532-44e3-a343-d66e9bfdbca0) Tidal Groups 1