logo

BlackBasta Ransomware Group's Internal Chat Logs Leaked

ID: 5e64d52d-8389-5c18-9d13-f3dea28ed25b

STIX ID: report--5e64d52d-8389-5c18-9d13-f3dea28ed25b

Feed Name: Halcyon Blog

Threat Score
78/100

Date Published: 2025-03-17

Date Updated: 2026-04-28

...
...

The report covers a public leak of BlackBasta's Matrix chat logs (Sept 2023–Sept 2024) exposing phishing templates, cryptocurrency addresses, victim credentials, IoCs, and identifying information about members and leadership. The leak details operational tactics, targeting rules (including whitelists and geographic avoidance), internal conflicts over targeting and pay, links to Conti and other groups, and the group's claimed impact (over 500 targets and ~$100M in ransoms). This intelligence provides defenders with indicators and insight into the group's structure, TTPs, and potential weaknesses.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.