A naukri.com initiative
Securityaffairs
1M
13
Image Credit: Securityaffairs
Leaked Black Basta chat logs reveal the gang’s operations
- Leaked Black Basta chat logs reveal internal conflicts, exposing member details and hacking tools as the gang reportedly falls apart.
- An unknown actor, named ExploitWhispers, leaked Matrix chat logs of the Black Basta ransomware gang revealing internal conflicts and member details.
- The leak includes chat messages from September 18, 2023, to September 28, 2024, showing inactivity in 2025 due to conflicts and scams.
- Key members left for other groups, and a major leak on February 11, 2025, exposed their operations, possibly due to attacks on Russian banks.
- Black Basta's ransomware effectiveness was questioned, with key members leaving for other groups like Cactus ransomware.
- The leaked chat logs reveal insights into Black Basta's operations, tools, and tactics, including a shared victim spreadsheet and VPN exploits.
- Members mocked failures and emphasized deadlines, using social engineering to deploy ransomware and applying pressure on victims.
- The gang exploited weak credentials, vulnerabilities, and social engineering for access, and rotated infrastructure to avoid detection.
- In May 2024, a joint Cybersecurity Advisory was issued regarding Black Basta's ransomware activity and its impact on critical infrastructure sectors.
- Black Basta has targeted over 500 organizations globally, accumulating $107 million in Bitcoin ransom payments and having links to the Conti Group.
Read Full Article
Like
For uninterrupted reading, download the app