Victim: grimaldialliance.com
Country : IT
Actor: blackbasta
Source: http://stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion/?id=grimaldialliance.com
Discovered: 2024-12-18 12:02:07.526883
Published: 2024-12-18 12:02:07.032626
Country : IT
Actor: blackbasta
Source: http://stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion/?id=grimaldialliance.com
Discovered: 2024-12-18 12:02:07.526883
Published: 2024-12-18 12:02:07.032626
Description : Grimaldi Alliance is an international law firm based in Italy, known for providing comprehensive legal services to both national and international clients. Established as a significant player in the legal market, Grimaldi Alliance operates in over 70 jurisdictions worldwide, with a strong presence in Europe and the Americas.SITE: www.grimaldialliance.com Address : Corso Europa, 12 20122 Milan ItalyTEL#: +39 02 3030 9330ALL DATA SIZE:,≈1.5tb+ 1. Corp data, Financial data, Accounting, Payroll 2. HR, Personal employees data and documents 3. Personal clients data and documents 4. Confidential documents, NDA’s & etc…
Ransomware Victims – ALL
Other Victims by blackbasta
Ransomware Landscape Overview
- Victim: Grimaldi Alliance (grimaldialliance.com)
- Actor: BlackBasta
- Data Compromised:
- Corporate data, financial records, accounting, payroll information
- HR and personal employee data
- Personal client data and documents
- Confidential documents, NDAs, etc.
- Ransomware Trends:
- Increase in targeted attacks on law firms and professional services due to sensitive data.
- Ransomware gangs often exfiltrate data before encryption to pressure victims into paying.
- Use of double extortion tactics, where both data encryption and public exposure are threats.
- Emergence of Ransomware-as-a-Service (RaaS) models, enabling less technically skilled actors to launch attacks.
- BlackBasta Group:
- Known for sophisticated attacks and targeting various sectors, including legal and financial services.
- Utilizes advanced encryption methods and often demands payment in cryptocurrencies.
- Maintains a dark web presence to negotiate ransom payments and showcase stolen data.
- National Cyber Agency Information:
- Italy’s national cybersecurity agency (ACN) works to enhance the country’s cyber resilience.
- Provides guidance and resources for organizations to mitigate ransomware risks.
- Collaborates with international partners to track and respond to ransomware threats.
- Encourages reporting of cyber incidents to improve response strategies and threat intelligence.