Black Basta Exploiting Vulnerabilities in Multiple Products (Campaign)
ID: 71b85dda-7e61-5412-a840-b47b126bc240
STIX ID: report--71b85dda-7e61-5412-a840-b47b126bc240
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2025-02-11
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
A major leak of Black Basta internal chat logs on February 11, 2025 exposed leadership instability, financial fraud, defections to rival groups, and detailed TTPs—ransomware deployment, phishing campaigns, and VPN exploitation—along with IoCs (IP addresses, domains, hashes, malicious files) and cryptocurrency wallet information used for ransom payments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.