Podcasts Technology Microsoft Threat Intelligence Podcast Black Basta and the Use of LLMs by Threat Actors

Black Basta and the Use of LLMs by Threat Actors

Published: Aug. 28, 2024, 7:10 a.m.

In this episode of the Microsoft Threat Intelligence Podcast host Sherrod DeGrippo is joined by Microsoft security researchers Anna Seitz and Daria Pop to discuss the latest trends in ransomware and the evolving role of AI in cyber threats. Daria Pop provides insights into the shifting tactics of Black Basta ransomware, including their use of phishing, social engineering, and remote management tools. The discussion also covers the persistence of malvertising and its challenges for defenders. Anna Seitz explores how state-sponsored threat actors, including Forest Blizzard, Emerald Sleet, and Crimson Sandstorm, are leveraging large language models (LLMs) for various malicious activities.\xa0\xa0\n\n\xa0\n\nIn this episode you\u2019ll learn:\xa0\xa0\xa0\xa0\xa0\xa0\xa0\n\nWhy the takedown of Qakbot impacted Black Basta\u2019s strategies\xa0\n\nWhat malvertising is and why its persistence is due to the complex nature of ad traffic\xa0\n\nHow the MITRE Atlas framework assists defenders in identifying new threats\xa0\n\n\xa0\n\nSome questions we ask:\xa0\xa0\xa0\xa0\xa0\xa0\xa0\n\nWhat role does social engineering play in the campaigns involving Quick Assist?\xa0\n\nHow are North Korean threat actors like Emerald Sleep using LLMs for their campaigns?\xa0\n\nCan you explain the changes in Black Basta\u2019s initial access methods over the years?\xa0\n\n\xa0\n\nResources:\xa0\xa0\nView Anna Seitz on LinkedIn\xa0\xa0\nView Daria Pop on LinkedIn\xa0\xa0\nView Sherrod DeGrippo on LinkedIn\xa0\xa0\n\xa0\n\nRelated Microsoft Podcasts:\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\xa0\n\n\nAfternoon Cyber Tea with Ann Johnson\xa0\n\n\nThe BlueHat Podcast\xa0\n\n\nUncovering Hidden Risks\xa0\xa0\xa0\xa0\xa0\n\n\xa0\nDiscover and follow other Microsoft podcasts at microsoft.com/podcasts\xa0\xa0\n\xa0\nGet the latest threat intelligence insights and guidance at Microsoft Security Insider\xa0\n\xa0\n\xa0\nThe Microsoft Threat Intelligence Podcast is produced by Microsoft and distributed as part of N2K media network.