Draft:Black Basta

From Wikipedia, the free encyclopedia


Black Basta is a Russia-linked ransomware hacker group that has been observed since early 2022.[1][2][3] It operates as a ransomware-as-a-service (RaaS) and uses double extortion techniques, whereby data is encrypted and stolen from the victim.[4][5] This data is stolen or published unless the ransom is paid.

Black Basta was the fourth most prolific ransomware strain in 2022.[6] Notable victims of Black Basta include Capita[7], Dish Network[8] and ABB[9]. Total ransoms paid to the group exceeded $100 million by mid 2023.[10][11]

Black Basta is believed to be an offshoot of the Conti ransomware group.[12][13] Analysis of blockchain transactions has uncovered bitcoin worth several million dollars being transferred between wallets controlled by Black Basta and Conti.[14]

References[edit]

  1. ^ "Threat Profile: Black Basta" (PDF). U.S. Department of Health and Human Services (HHS). March 15, 2023.
  2. ^ "Ransomware Spotlight: Black Basta - Security News". www.trendmicro.com. Retrieved 2023-12-05.
  3. ^ "Black Basta: New ransomware threat aiming for the big league". CSO Online. Retrieved 2023-12-05.
  4. ^ "Black Basta – Technical Analysis". Kroll. Retrieved 2023-12-05.
  5. ^ "Black Basta: Old Dogs with New Tricks | Darktrace Blog". darktrace.com. Retrieved 2023-12-05.
  6. ^ "A Ransomware Forecast for 2023". Intel471. Retrieved 2023-12-06.
  7. ^ "Capita confirms hackers stole data in recent cyberattack". BleepingComputer. Retrieved 2023-12-05.
  8. ^ "Dish Network likely paid ransom after recent ransomware attack". BleepingComputer. Retrieved 2023-12-05.
  9. ^ Hendery, Simon (2023-05-30). "ABB confirms data stolen in Black Basta ransomware attack". SC Media. Retrieved 2023-12-05.
  10. ^ "Black Basta ransomware victims have paid over $100 million". www.elliptic.co. Retrieved 2023-12-05.
  11. ^ Satter, Raphael; Satter, Raphael (2023-11-30). "Ransomware group 'Black Basta' has raked in more than $100 million -researchers". Reuters. Retrieved 2023-12-05.
  12. ^ blogs.blackberry.com. "Black Basta: Rebrand of Conti or Something New?". blogs.blackberry.com. Retrieved 2023-12-05.
  13. ^ Mascellino, Alessandro (2022-11-08). "Conti Affiliates Black Basta, BlackByte Continue to Attack Critical Infrastructure". Infosecurity Magazine. Retrieved 2023-12-05.
  14. ^ "Black Basta ransomware victims have paid over $100 million". www.elliptic.co. Retrieved 2023-12-05.