A huge trove of leaked Black Basta chat logs expose the ransomware gang’s key members and victims

A trove of chat logs included in the Black Basta Ranswear group has been leaked online, published by the original members of the Russia-connected gang.

The chatlags, which include more than 200,000 messages from September 18, 2023 to September 28, 2024, shared by a leak by the threat intelligence agency product. CyberSSCURITIES FIms say that some members failed to provide effective decryption equipment to their victims, but the “internal conflict” between the Black Basta Group has come.

It is not yet known whether the Liquor Black Basta Gang used by the “Exploite Whipper” alias in the wire.

Black Basta is a Russian language ransom ransware gang, which has added to the US government Hundreds of attacks on critical infrastructure and global businessযার প্রকাশ্যে পরিচিত ক্ষতিগ্রস্থদের অন্তর্ভুক্ত রয়েছে The US Healthcare Agency Association, UK Utility Organization South WaterAnd British Outsourcing Giant CapitaThe The leaked chat logs are with some unexpected targets that have never been seen inside the Ranswar Gang.

Accordingly Product on a post on XThe leaks said that hackers were “crossed the line” targeting Russian domestic banks.

“So we are dedicated to uncover the truth and to investigate the next steps of the Black Bastar,” wrote Liquor.

The target damaged, absorbed and a teenager hacker

A copy of the hackers’ chat logs from TechCrunch Prodaf was obtained, which contains details about the main members of the Ranswireware gang.

These members include “YY” (Black Baster’s Chief Administrator); “Lapa” (another original leader of Black Basta); “Cortes” (a hacker Kakabot) ;; And also known as “Trump” (“AA” and “JG”).

Hacker “Trump” Oleg Nephdovaka is considered a name used, who encouraged researchers Description As “the main boss of the group.” Researchers have now associated Nephdovaka with the Denum Connty Ransomwear Group, Which its internal chat logs are closed as soon as the leaks are leaked After the gang announced his support to attack Ukraine in Russia in 2022.

Leaked black basta chat logs also Quotation of a member They are 17 -year -old, watching TechCrunch.

According to our calculations, the leaked chats have 380 unique links related to the company’s information hosted at Zuminfo, it is a data broker that collects and sells access to businesses and their staff, which shows that hackers were used to research their target companies. Links indicate some of the number of companies marked by this gang during the 12-month period.

Chat logs reveal the unprecedented insights in group activities. The messages include the details of the Black Bastar damage, copying the phishing templates used in their cyberratetacks, some absorption used by the gang, the cryptocurrency address related to ransom and ransom claims with the hacked companies and the discussion of the victims.

We also got the chat logs of hackers by discussing a TechCrunch article about the ongoing Kakabot Activities, In spite of the previous FBI Techtown Operation the infamous Botnet is aimed to be offline offlineThe

TechCrunch Chat Logs also found the names of many previously unknown target companies. It includes US automotive giants Fisca fail; Serner Corporation, a HealthTeck supplier, is now owned by Oracle; And UK -based Travel Farm Hotel Plan. It is not yet known whether the companies were violated and none of the companies did not respond to TechCrunch search.

Chat logs appear to show the gang attempt Protection bugs use on enterprise network devicesSuch routers and firewalls that enclose an organization’s network and act as a digital gatekeeper.

Hackers were proud of their skills to use weaknesses on Citrics Remote access products to enter at least two companies’ network. This gang also used to exploit the weaknesses in Evanti, Palo Alto Networks and Fortinate software to operate cybattacks.

A conversation between Black Basta members further suggested that some of the group were concerned about investigating by the Russian authorities in response to geographical pressure. Although Russia had long been a safe haven for ransom gangs, Black Basta was also concerned about steps taken by the US government.

Group assignment systems have warned that the FBI and CISA may be “100% forced” and the agencies may “take a strict position on Black Baster.”

Black Basta’s Dark Web leaky site, which is publicly used to extort public extortion to provide ransom demand to this gang, was offline at the time of publication.