Black Basta: The Fallen Ransomware Gang That Lives On

Black Basta, a Russian-speaking ransomware group active since April 2022, used double-extortion campaigns to compromise hundreds of organizations across sectors including healthcare and critical infrastructure and collected substantial ransom payments; after disruption from the 2023 Qakbot takedown and a major leak of internal chat logs and operational data, the group has quieted but researchers warn its operators are likely to regroup or migrate to other criminal operations.