Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal | Trend Micro (US)

Black Basta and Cactus ransomware groups are using BackConnect malware to maintain persistent control over compromised machines and exfiltrate sensitive data. The malware, linked to QakBot, enables attackers to execute commands, steal credentials, and bypass security measures. Trend Micro Threat Intelligence data shows a significant increase in Black Basta incidents in North America and Europe, particularly targeting manufacturing, financial, and real estate sectors.