A Hugge Tive of Leaked Black Basta Chat Logs Expose The Ransomware Gang’s Key Members and Victims

A Hugge Tive of Leaked Black Basta Chat Logs Expose The Ransomware Gang’s Key Members and Victims

A Trove of Chat Logs Allegedly Belonging to the Black Basta Ransomware Group Has Leaked Online, Exposing Key Members of the Prosia-Linked Gang.

The Chat Logs, Who Include Over 200,000 Message Spanning from September 18, 2023, To SEPTEMBER 28, 2024, Were shared with intelligence composer. The Cybersecurity Company Says The Leak Comes Amid “Internal Conflict”

Its note known if the Leaker, Who Uses the Alias ​​“Exploitwhispers” on Telegegram, Was a Member of the Black Basta Gang.

Black Basta is a prolific rusian-language ransomware gang, which the Ussalnment has Linked to Hundreds of Attacks on Critical InfraRructure and Global Businesses, Whose Publichly Known Victims Company South Water, and British Outsouring Giant Capita. The Leaked Chat Logs Give A Never-Beliene

According to a post on x by protef, The Leaker Said That The Hackers “Crossed The Line” by Targeting Russian Domestic Banks.

“So we are dedicated to uncovering the Truth and Investigating Black Basta’s Next Steps,” The Leaker Wrote.

TAREDED Victims, Exploits, and A Teenage Hacker

TechCrunch Obtained a copy of the hackers’ chat logs from prodft, whok Contain Details About Key Members of the Ransomware Gang.

These Members Include “YY” (Black Basta’s Main Administrator); “Lapa” (Another of Black Basta’s Key Leaders); “Cortes” (A Hacker Linked to the Qakbot Botnet); And “Trump” (Also Known as “AA” and “GG”).

The hacker “Trump” is Believed to be an alias used by oleg Nefefaka, Who Prodaft Researchers Description As “The Group’s Main Boss.” The Researchers Linked Nefedovaka to the Now-Defunct Conti Conti Ransomware Group, Who Shut Down Soon After

The Leaked Black Basta Chat Logs Also quote One Member As Saying They Are 17-Years-Old, Techcrunch Has Seeen.

By Our Country, The Leaked Chats Contain 380 Unique Links Related to Company Information Hoted on Zoomınfo, A Data Broker That Collects and Sells Access to Businesses and Their Employees They Targeted. The Links Also Give SOME INDICATION OF THE NUMBER OF ORGANIZATIONS

The Chat Logs Also Reveal Unpenceced Insights into the Group’s Operations. The Messages Include Details on Black Basta’s Victims, Copies of Phishing Templates Used in the Cyberattacks, Some of the Exploits Used by the Gang, CryptoCurrency Adrseses Associated with Ransom Payments, and Details About Ransom with hacked organizations.

We Also Found Chat Logs of the Hackers Discussing a TechCrunch Article ABout Ongriing Qakbot Activity, Despite an Earlier FBI TAKEDOWN Operaration

TechCrunch Also Found Chat Logs That Named Several Previously Unknown Targeded Organizations. This Includes The Failed Us Automotive Giant Fisker; Health Tech Provider Cerner Corp. And UK-Based Travel firm Hotelplan. It is not known if the Companies were Breached, None of the Companies Responded to Techcrunch’s Inquiries.

The Chat Logs Applear to Show The Gang’s Efforts in Exploiting Security Bugs in Enterprise Network Devices, Such As Routers and Firewalls that site the perimeter of a Company’s Network and Act As Digital Gatekeepers.

The hackers boasted their ability to exploit vulnerabilities in Citrix Remote Access Products to Break into Least at Least Networks. The Gang Also Talked About Exploiting Vulnerabilities in Ivanti, Palo Alto Networks, and Fortinet Software to Carry Out Cyberattacks.

A Conversation Between Black Basta Basta Basta Members Also Suggests that the Group Were Worried About Being Investigated by Russian Authorities in Response to Geopolitical Pressures. WHO Russia Has Long Been A safeen for Ransomware Gangs, Black Basta Was Also Concerned About Acts Brought by the Us Government.

Message Sent After The Group’s Breach of Ascension’s Systems Warned That The FBI and CISA ARE

Black Basta’s Dark Web Leak Site, Who it Uses to Publicly Extims Extims Indo Paying The Gang A Ransom Demand, Was Offline at the Time of Publication.