logo

Black Basta’s alleged ringleader identified as authorities raid homes of other members

ID: aa5df52b-e19a-51f0-949b-287f72532818

STIX ID: report--aa5df52b-e19a-51f0-949b-287f72532818

Feed Name: CyberScoop

Threat Score
75/100

Date Published: 2026-01-21

Date Updated: 2026-04-21

Author: Matt Kapko

...
...

Law enforcement across multiple European countries pursued members of the Black Basta ransomware group after leaked internal chats exposed the group's operations; raids in Ukraine and Germany targeted suspected participants and authorities publicly named Oleg Evgenievich Nefedov as the alleged leader accused of orchestrating widespread extortion, while seizures included data and cryptocurrency. The report links Black Basta to the Conti ecosystem, describes the group's use of credential theft to gain access and deploy ransomware, and emphasizes that although activity has waned, dispersed actors often reconstitute under new aliases, prompting sustained multinational disruption efforts against ransomware operators, affiliates, and supporting services.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.