Latest Black Basta news

Keytronic confirms data breach after ransomware gang leaks stolen files

PCBA manufacturing giant Keytronic is warning it suffered a data breach after the Black Basta ransomware gang leaked 530GB of the company's stolen data two weeks ago.
- Lawrence Abrams
- June 14, 2024
- 05:20 PM
- 0
CISA warns of Windows bug exploited in ransomware attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity Windows vulnerability abused in ransomware attacks as a zero-day to its catalog of actively exploited security bugs.
- Sergiu Gatlan
- June 14, 2024
- 12:39 PM
- 0
Black Basta ransomware gang linked to Windows zero-day attacks

The Cardinal cybercrime group (Storm-1811, UNC4394), who are the main operators of the Black Basta ransomware, is suspected of exploiting a Windows privilege escalation vulnerability, CVE-2024-26169, before a fix was made available.
- Bill Toulas
- June 12, 2024
- 06:00 AM
- 0
The Week in Ransomware - May 17th 2024 - Mailbombing is back

This week was pretty quiet on the ransomware front, with most of the attention on the seizure of the BreachForums data theft forum. However, that does not mean there was nothing of interest released this week about ransomware.
- Lawrence Abrams
- May 17, 2024
- 05:30 PM
- 1
Windows Quick Assist abused in Black Basta ransomware attacks

Financially motivated cybercriminals abuse the Windows Quick Assist feature in social engineering attacks to deploy Black Basta ransomware payloads on victims' networks.
- Sergiu Gatlan
- May 15, 2024
- 01:06 PM
- 2
CISA: Black Basta ransomware breached over 500 orgs worldwide

CISA and the FBI said today that Black Basta ransomware affiliates breached over 500 organizations between April 2022 and May 2024.
- Sergiu Gatlan
- May 11, 2024
- 10:09 AM
- 0
The Week in Ransomware - May 10th 2024 - Chipping away at LockBit

After many months of taunting law enforcement and offering a million-dollar reward to anyone who could reveal his identity, the FBI and NCA have done just that, revealing the name of LockBitSupp, the operator of the LockBit ransomware operation.
- Lawrence Abrams
- May 10, 2024
- 06:01 PM
- 0
Hyundai Motor Europe hit by Black Basta ransomware attack

Car maker Hyundai Motor Europe suffered a Black Basta ransomware attack, with the threat actors claiming to have stolen three terabytes of corporate data.
- Lawrence Abrams
- February 08, 2024
- 03:16 PM
- 0
Water services giant Veolia North America hit by ransomware attack

Veolia North America, a subsidiary of transnational conglomerate Veolia, disclosed a ransomware attack that impacted systems part of its Municipal Water division and disrupted its bill payment systems.
- Sergiu Gatlan
- January 23, 2024
- 04:52 PM
- 0
The Week in Ransomware - January 5th 2024 - Secret decryptors

With it being the first week of the New Year and some still away on vacation, it has been slow with ransomware news, attacks, and new information.
- Lawrence Abrams
- January 05, 2024
- 05:16 PM
- 0
New Black Basta decryptor exploits ransomware flaw to recover files

Researchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free.
- Lawrence Abrams
- December 30, 2023
- 10:14 AM
- 0
The Week in Ransomware - December 1st 2023 - Police hits affiliates

An international law enforcement operation claims to have dismantled a ransomware affiliate operation in Ukraine, which was responsible for attacks on organizations in 71 countries.
- Lawrence Abrams
- December 01, 2023
- 05:11 PM
- 1
Black Basta ransomware made over $100 million from extortion

Russia-linked ransomware gang Black Basta has raked in at least $100 million in ransom payments from more than 90 victims since it first surfaced in April 2022, according to joint research from Corvus Insurance and Elliptic.
- Sergiu Gatlan
- November 29, 2023
- 01:19 PM
- 0
Toronto Public Library confirms data stolen in ransomware attack

The Toronto Public Library (TPL) confirmed that the personal information of employees, customers, volunteers, and donors was stolen from a compromised file server during an October ransomware attack.
- Sergiu Gatlan
- November 15, 2023
- 02:20 PM
- 0
Toronto Public Library outages caused by Black Basta ransomware attack

The Toronto Public Library is experiencing ongoing technical outages due to a Black Basta ransomware attack.
- Lawrence Abrams
- November 01, 2023
- 04:25 PM
- 0
US govt contractor ABB confirms ransomware attack, data theft

Swiss tech multinational and U.S. government contractor ABB has confirmed that some of its systems were impacted by a ransomware attack, previously described by the company as "an IT security incident."
- Sergiu Gatlan
- May 26, 2023
- 12:33 PM
- 0
Arms maker Rheinmetall confirms BlackBasta ransomware attack

German automotive and arms manufacturer Rheinmetall AG confirms that it suffered a BlackBasta ransomware attack that impacted its civilian business.
- Bill Toulas
- May 23, 2023
- 12:02 PM
- 0
Capita warns customers they should assume data was stolen

Business process outsourcing firm Capita is warning customers to assume that their data was stolen in a cyberattack that affected its systems in early April.
- Sergiu Gatlan
- May 13, 2023
- 10:05 AM
- 0
The Week in Ransomware - May 12th 2023 - New Gangs Emerge

This week we have multiple reports of new ransomware families targeting the enterprise, named Cactus and Akira, both increasingly active as they target the enterprise.
- Lawrence Abrams
- May 12, 2023
- 05:23 PM
- 4
Multinational tech firm ABB hit by Black Basta ransomware attack

Swiss multinational company ABB, a leading electrification and automation technology provider, has suffered a Black Basta ransomware attack, reportedly impacting business operations.
- Lawrence Abrams
- May 11, 2023
- 05:05 PM
- 0