---
title: Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks
description: The Microsoft Threat Intelligence team has observed a threat known as Storm-1811 abusing the client management tool Quick Assist to target users in social engineering attacks. This blog post discusses the potential impact of this threat and provides insights into how cybercriminals are exploiting Microsoft’s Quick Assist feature in ransomware attacks.
image: https://blog.oitc.ca/hubfs/Imported_Blog_Media/ms-3.png
---

[Skip to content](https://blog.oitc.ca/alerts/cybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks#main-content)

![Outsource IT Computing](https://blog.oitc.ca/hs-fs/hubfs/OITC%20Logo-1.png?width=1408&height=302&name=OITC%20Logo-1.png)Homepage

- [Services](https://oitc.ca/services)
- [Industries](https://oitc.ca/industries)
- Company
  
    - [Careers](https://oitc.ca/careers)
    - [About Us](https://oitc.ca/about)
    - [Solution Partners](https://oitc.ca/solution-partners)
    - [Community Support](https://oitc.ca/community-support)
- Resources
  
    - [Blog](https://blog.oitc.ca)
    - [Bill Payments](https://pay.oitc.ca/)
    - [VoIP 911](https://oitc.ca/v911/)
    - [Client Portal](https://portal.oitc.ca/)

[Get started](https://oitc.ca/contact/)

- [Services](https://oitc.ca/services)
- [Industries](https://oitc.ca/industries)
- Company
  
    - [Careers](https://oitc.ca/careers)
    - [About Us](https://oitc.ca/about)
    - [Solution Partners](https://oitc.ca/solution-partners)
    - [Community Support](https://oitc.ca/community-support)
- Resources
  
    - [Blog](https://blog.oitc.ca)
    - [Bill Payments](https://pay.oitc.ca/)
    - [VoIP 911](https://oitc.ca/v911/)
    - [Client Portal](https://portal.oitc.ca/)

[Get started](https://oitc.ca/contact/)

![](https://blog.oitc.ca/hs-fs/hubfs/Imported_Blog_Media/ms-3.png?width=728&height=380&name=ms-3.png)

Alerts

# Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks

![Nathan Zych](https://7528315.fs1.hubspotusercontent-na1.net/hub/7528315/hubfs/raw_assets/public/mV0_d-cms-elevate-theme_hubspot/elevate/images/avatar-placeholder.jpg?width=48&height=48&name=avatar-placeholder.jpg)

 Nathan Zych

June 1, 2024

The Microsoft Threat Intelligence team has identified a new threat known as Storm-1811, which is utilizing the client management tool Quick Assist to launch social engineering attacks. This blog post discusses the potential impact of this threat and provides insights into how cybercriminals are exploiting Microsoft’s Quick Assist feature in ransomware attacks. [Read more](https://thehackernews.com/2024/05/cybercriminals-exploiting-microsofts.html)

[![GET UNLIMITED REMOTE AND ONSITE BUSINESS IT SUPPORT FOR A FIXED FEE](https://blog.oitc.ca/hs-fs/hubfs/Imported_Blog_Media/MSP-B-Jul-10-2025-10-12-03-6626-PM.png?width=900&name=MSP-B-Jul-10-2025-10-12-03-6626-PM.png)](https://www.oitc.ca/contact/)

[Click here to contact Outsource IT](https://www.oitc.ca/contact/)

## Share this post

<https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.oitc.ca%2Falerts%2Fcybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks><https://twitter.com/intent/tweet?url=https%3A%2F%2Fblog.oitc.ca%2Falerts%2Fcybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks><https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.oitc.ca%2Falerts%2Fcybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks><https://pinterest.com/pin/create/button/?url=https%3A%2F%2Fblog.oitc.ca%2Falerts%2Fcybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks>[mailto:https%3A%2F%2Fblog.oitc.ca%2Falerts%2Fcybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks](mailto:https%3A%2F%2Fblog.oitc.ca%2Falerts%2Fcybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks)

## Keep reading

### [Managed IT vs In-House IT: Why It’s Not Always an Either-Or Decision](https://blog.oitc.ca/managed-it-vs-in-house-it-why-its-not-always-an-either-or-decision)

### [Blog 10 Signs You’ve Outgrown Your Current IT Provider](https://blog.oitc.ca/10-signs-youve-outgrown-your-current-it-provider)

[![OITC Logo-1](https://blog.oitc.ca/hs-fs/hubfs/OITC%20Logo-1.png?width=300&height=64&name=OITC%20Logo-1.png "OITC Logo-1")](https://oitc.ca)

<https://www.linkedin.com/organization/1598823/><https://www.facebook.com/outsourceitcomputing/><https://x.com/oitc_ca>

---

[Privacy Policy](https://oitc.ca/privacy-policy/) · © 2025. All rights reserved.

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Nathan Zych",
    "url" : "https://blog.oitc.ca/author/nathan-zych"
  },
  "dateModified" : "2025-07-10T22:13:03.387Z",
  "datePublished" : "2024-06-01T10:44:29.000Z",
  "headline" : "Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks",
  "mainEntityOfPage" : {
    "@id" : "https://blog.oitc.ca/alerts/cybercriminals-exploiting-microsofts-quick-assist-feature-in-ransomware-attacks",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.oitc.ca/hubfs/OITC%20Logo-1.png"
    }
  }
}
```