Summary: Recent leaks of internal chats from the ransomware group Black Basta reveal significant strife within the organization, contradicting its previously formidable reputation as a ransomware cartel. The logs show internal disputes over operations, failures in malware deployment, and the effects of the group’s controversial attacks on Russian banking infrastructure. As a result, Black Basta’s operational viability is threatened, leading to member defections and a sharp decline in activity since summer 2024.
Affected: Black Basta ransomware group
Keypoints :
- Black Basta, a Russian-speaking RaaS operation, has faced a steep decline in activity due to internal conflicts and operational issues.
- The leaked chat logs reveal disputes among members and criticism of their leader’s prioritization of personal gain over group interests.
- Infighting has led to defections, with former members joining other major cybercriminal groups, signaling a potential end to Black Basta’s dominance in the ransomware landscape.
Source: https://www.darkreading.com/threat-intelligence/black-basta-goes-dark-infighting-chat-leaks