BlackBasta Ransomware Group's Internal Chat Logs Leaked
ID: 5e64d52d-8389-5c18-9d13-f3dea28ed25b
STIX ID: report--5e64d52d-8389-5c18-9d13-f3dea28ed25b
Feed Name: Halcyon Blog
The report covers a public leak of BlackBasta's Matrix chat logs (Sept 2023–Sept 2024) exposing phishing templates, cryptocurrency addresses, victim credentials, IoCs, and identifying information about members and leadership. The leak details operational tactics, targeting rules (including whitelists and geographic avoidance), internal conflicts over targeting and pay, links to Conti and other groups, and the group's claimed impact (over 500 targets and ~$100M in ransoms). This intelligence provides defenders with indicators and insight into the group's structure, TTPs, and potential weaknesses.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
