New Ransomware Group Payouts King Linked To Former BlackBasta Members
ID: 6282c372-3601-523f-a675-068e2b4bc19c
STIX ID: report--6282c372-3601-523f-a675-068e2b4bc19c
Feed Name: Cyber Press
The report describes Payouts King, a highly capable ransomware group tied to former BlackBasta affiliates, detailing their social-engineering initial access (spam, phishing, vishing and inducement to use Quick Assist), sophisticated obfuscation (dynamic string building, custom CRC and FNV1 hashing), and a destructive encryption scheme combining 4,096-bit RSA and 256-bit AES with selective block encryption; it also covers persistence mechanisms, file markers/extensions, defensive recommendations, and notes active observations of related attacks in early 2026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.