logo

New Black Basta decryptor exploits ransomware flaw to recover files encrypted between November 2022 earlier this month

ID: a191b51b-1407-5874-98f9-64a2823ffe26

STIX ID: report--a191b51b-1407-5874-98f9-64a2823ffe26

Feed Name: DataBreaches.Net

Threat Score
65/100

Date Published: 2023-12-30

Date Updated: 2026-05-13

Author: Dissent

...
...

Security Research Labs published a 'Black Basta Buster' decryptor that leverages a weakness in the Black Basta ransomware's ChaCha-based encryption to recover files for victims infected from November 2022 up to shortly before the patch; Black Basta developers fixed the encryption bug about a week ago, which prevents this technique from working against newer attacks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.