BlackBasta
Also known as Black Basta
Reports
4
First seen
May 13, 2025
Last seen
Aug 7, 2026
Motivation
Financial
Top ATT&CK techniques
T1070.001 Indicator Removal: Clear Windows Event Logs ×2T1486 Data Encrypted for Impact ×2T1027 Obfuscated Files or Information ×2T1562.001 Impair Defenses: Disable or Modify Tools ×2T1071 Application Layer Protocol ×1T1021.001 Remote Services: Remote Desktop Protocol ×1T1003 OS Credential Dumping ×1T1110 Brute Force ×1T1041 Exfiltration Over C2 Channel ×1T1059.004 Command and Scripting Interpreter: Unix Shell ×1T1087 Account Discovery ×1T1036 Masquerading ×1
Indicators
hash_sha256 ×23filename ×12ip_v4 ×9domain ×7hash_md5 ×1url ×1
Indicator values are available on Pro and via the API.
Recent reports
High