Black Basta’s old affiliates are back—now using Teams phishing plus Python scripts to silently hijack networks.

Half their attacks come from legit-looking Microsoft domains, fooling security teams.

CheckDot ( CDT ) is SAFU