Quick Assist

Reported Context (2)

The most commonly observed RMM tools used in relation to this scam were Quick Assist (QuickAssist.exe / msra.exe), AnyDesk, ScreenConnect (ConnectWise), TeamViewer, Atera, Zoho Assist, NetSupport, and LogMeIn. Arctic Wolf Details Teams External-Chat Social Engineering and Payload Chain
They used Quick Assist, RemSupp, and other tools to gain remote access and persist on devices. Sophos Details STAC4749 Teams Vishing Campaign Linked to Chaos Ransomware

Malware (4)

Threat Actors (6)

MITRE ATT&CK (17)

Vendors (2)

Products (3)

Tools (13)

Industries (4)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.