All Threat Groups
ID: blackbasta
Blackbasta Syndicate Dossier
First Intercepted
2022-04-26
Latest Disclosure
2025-01-11
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Emerging in April 2022 as an offshoot linked to Conti core developers and FIN7 (UNC4393), Black Basta operates a closed, elite Ransomware-as-a-Service model using sophisticated C/C++ binaries for Windows and ESXi. The cartel targets healthcare, defense, manufacturing, and government entities in the United States, Europe, and Australia with swift multithreaded ChaCha20 encryption. Access vectors encompass Qakbot and DarkGate malware distribution, spearphishing, voice phishing (vishing) impersonating IT helpdesks, and double extortion through their Basta News leak platform.
Tactics, Techniques & Procedures (MITRE ATT&CK)
T1566.001: Spearphishing Attachment T1190: Exploit Public-Facing Application T1078: Valid Accounts T1059.001: PowerShell T1047: Windows Management Instrumentation T1021.002: SMB/Windows Admin Shares T1562.001: Disable or Modify Tools T1490: Inhibit System Recovery T1486: Data Encrypted for Impact T1567.002: Exfiltration to Cloud Storage
Targeted Sectors & Geographies
Manufacturing (3) Retail (1) Construction (1) Technology (1) Services (1) Legal (1)
US (6) GB (2)
Known Dark Web Infrastructure & Mirrors
stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion
OFFLINE
aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
OFFLINE
bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion
OFFLINE
Disclosed Victims & Incident Archive (793)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2025-01-11 | Schuff Steel Company | General | -- |
| 2025-01-11 | Granby Industries | General | -- |
| 2025-01-11 | Plasma-Therm | General | -- |
| 2025-01-11 | Arun Estates | General | -- |
| 2025-01-11 | Brachot | General | -- |
| 2025-01-11 | Avril Supermarché Santé | General | -- |
| 2025-01-11 | Mortgage Investors Group | General | -- |
| 2025-01-11 | migonline.com | General | -- |
| 2024-12-18 | medion.com | General | -- |
| 2024-12-18 | Furmano’s | General | -- |
| 2024-12-18 | Fruit of the Earth | General | -- |
| 2024-12-18 | Bender GmbH & Co. KG | General | -- |
| 2024-12-18 | Valveworks USA | General | -- |
| 2024-12-18 | Wikov | General | -- |
| 2024-12-18 | Active Dynamics | General | -- |
| 2024-12-18 | Bath Fitter | Manufacturing | US |
| 2024-12-18 | Grimaldi Alliance | General | -- |
| 2024-12-18 | Medion AG | General | -- |
| 2024-12-17 | bnext.nl | General | -- |
| 2024-12-12 | plasmatherm.com | General | -- |
| 2024-12-12 | avril.ca | General | -- |
| 2024-12-11 | At Interspiro | General | -- |
| 2024-12-11 | brachot.com | General | -- |
| 2024-12-10 | arunestates.co.uk | General | -- |
| 2024-12-05 | bathfitter.com | General | -- |
| 2024-12-04 | snatt.it | General | -- |
| 2024-12-04 | vossko.de | General | -- |
| 2024-12-04 | Graham + Sibbald | General | -- |
| 2024-12-04 | Cafe Zupas | General | -- |
| 2024-12-04 | Westbank Corp | General | -- |
| 2024-12-04 | BT Group plc | General | -- |
| 2024-12-04 | BEKO TECHNOLOGIES GMBH | General | -- |
| 2024-12-04 | The Snatt Omlog Companies | General | -- |
| 2024-12-04 | Medica Corporation | General | -- |
| 2024-12-04 | Lorne Stewart Group | General | -- |
| 2024-12-04 | Vossko GmbH & Co. KG | General | -- |
| 2024-11-27 | grimaldialliance.com | General | -- |
| 2024-11-26 | valveworksusa.com | General | -- |
| 2024-11-21 | granbyindustries.com | General | -- |
| 2024-11-21 | wikov.com | General | -- |
| 2024-11-20 | schuff.com | General | -- |
| 2024-11-20 | activedynamics.com | General | -- |
| 2024-11-19 | Wachter | General | -- |
| 2024-11-19 | Jonti-Craft | General | -- |
| 2024-11-19 | ISA | General | -- |
| 2024-11-19 | Rockport Mortgage | General | -- |
| 2024-11-19 | KMC Global | General | -- |
| 2024-11-19 | RAUCH Streuer – Kompetenz in Entwicklung & Herstellung | General | -- |
| 2024-11-19 | REMBE GmbH Safety + Control | General | -- |
| 2024-11-19 | McLean Mortgage Corporation | General | -- |
| 2024-11-19 | Suit-Kote Corporation | General | -- |
| 2024-11-19 | Mithun | General | -- |
| 2024-11-19 | Andy Frain Services | General | -- |
| 2024-11-19 | Gleason, Flynn, Emig & McAfee | General | -- |
| 2024-11-19 | Instinct Pet Food | General | -- |
| 2024-11-19 | Eaton Metal Products Company | General | -- |
| 2024-11-19 | CULTURE-BUILDING EXPERTS | General | -- |
| 2024-11-14 | lornestewartgroup.com | General | -- |
| 2024-11-13 | medicacorp.com | General | -- |
| 2024-11-12 | fote.com | General | -- |
| 2024-11-04 | rembe.de | General | -- |
| 2024-10-31 | bender.de | General | -- |
| 2024-10-31 | beko-technologies.com | General | -- |
| 2024-10-31 | gfemlaw.com | General | -- |
| 2024-10-29 | The Rosen Law Firm, P.A. | General | -- |
| 2024-10-29 | Weber Packaging Solutions | General | -- |
| 2024-10-29 | Distribution Alternatives, Inc. | General | -- |
| 2024-10-29 | CELO | General | -- |
| 2024-10-29 | westbankcorp.com | General | -- |
| 2024-10-25 | btci.com | General | -- |
| 2024-10-24 | Tuggle Duggins | General | -- |
| 2024-10-24 | g-s.co.uk | General | -- |
| 2024-10-24 | cafezupas.com | General | -- |
| 2024-10-23 | andyfrain.com | General | -- |
| 2024-10-23 | rauch.de | General | -- |
| 2024-10-22 | hamptonsecurities.com | General | -- |
| 2024-10-22 | isaitaly.com | General | -- |
| 2024-10-21 | Temple, Inc. | General | -- |
| 2024-10-21 | Miller Edge | General | -- |
| 2024-10-21 | The Kaiser Enterprise | General | -- |
| 2024-10-21 | Silver Springs Bottled Water Company | General | -- |
| 2024-10-21 | LEWA | General | -- |
| 2024-10-18 | continentalserves.com | General | -- |
| 2024-10-18 | jonti-craft.com | General | -- |
| 2024-10-17 | interspiro.com | General | -- |
| 2024-10-17 | mcleanmortgage.com | General | -- |
| 2024-10-17 | eatonmetal.com | General | -- |
| 2024-10-16 | suit-kote.com | General | -- |
| 2024-10-16 | instinctpetfood.com | General | -- |
| 2024-10-16 | wachter.com | General | -- |
| 2024-10-14 | GFM | General | -- |
| 2024-10-14 | Case Parts Company | General | -- |
| 2024-10-14 | kmcglobal.com | General | -- |
| 2024-10-10 | furmanos.com | General | -- |
| 2024-10-10 | daserv.com | General | -- |
| 2024-10-10 | celo.com | General | -- |
| 2024-10-09 | rosenlegal.com | General | -- |
| 2024-10-08 | weberpackaging.com | General | -- |
| 2024-10-08 | gkcorp.com | General | -- |
| 2024-10-05 | rockportmortgage.com | General | -- |
Showing 100 most recent disclosures of 793 total records. Use the Live Feed or API for complete records.