FlagThis

A significant leak of internal chat logs from the Black Basta ransomware gang has surfaced online, exposing the group's inner workings. TechCrunch obtained a copy of the chat logs, which reveal internal strife, financial disputes, and operational details spanning from September 2023 to September 2024. The exposed communications shed light on the gang's key members, targeted organizations, exploits, and even their fears of government intervention, with one leaker alleging the group "crossed the line" by targeting Russian domestic banks.

The leaked chat logs provide insights into Black Basta's structure, including administrators and hackers linked to the Qakbot botnet. One member, known as "Trump" or "AA" and "GG," is believed to be Oleg Nefedovaka, potentially the group's main boss with connections to the defunct Conti ransomware group. The leak has also exposed Black Basta's phishing templates, victim credentials, and cryptocurrency addresses. The exposure of this sensitive information could significantly disrupt the gang's operations and assist cybersecurity professionals in understanding and mitigating Black Basta's tactics.

ImgSrc: www.the420.in

References :

• techcrunch.com: A huge trove of chat logs from the Black Basta ransomware gang have leaked online. TechCrunch obtained a copy.
• cyberinsider.com: A major leak of internal chat logs from the Black Basta ransomware gang has exposed deep internal conflicts, failed operations, and financial disputes.
• www.scworld.com: Purported Black Basta internal communications exposed
• www.the420.in: A massive leak of internal chat logs from the BlackBasta ransomware group has exposed the inner workings of the notorious cybercriminal organization, revealing internal conflicts, financial disputes, and the group’s eventual disbanding.
• Zack Whittaker: New, w/ : A huge trove of chat logs from the Black Basta ransomware gang have leaked online. TechCrunch obtained a copy. The logs reveal new details on the group's members (including a 17-year-old), which organizations it targeted, their exploits, and their fears of being vanned by the Russian government. More:
• socradar.io: Black Basta’s Internal Chats Leak: Everything You Need to Know
• CyberInsider: Black Basta Ransomware Chats Leaked Exposing Internal Chaos
• threatmon.io: The Implosion of Black Basta: A Deep Dive into the Leaked Chat Logs and Operational Collapse The recent leak of internal chat logs from the Black Basta ransomware syndicate has provided unprecedented visibility into the operations, conflicts, and eventual disintegration of one of the most prolific cybercriminal groups of the past three years.
• Blog: New Details on Black Basta Operations via Leaked Chats on Telegram
• ThreatMon: The Implosion of Black Basta: A Deep Dive into the Leaked Chat Logs and Operational Collapse
• Carly Page: A trove of chat logs allegedly belonging to the prolific Black Basta ransomware group has leaked online, revealing unprecedented insights into the gang's operations The logs, seen by TechCrunch, also name several previously unknown targeted organizations
• bsky.app: Article reporting on the leak of Black Basta ransomware gang's internal chat logs.
• www.bleepingcomputer.com: Article on the Black Basta ransomware gang's internal chat logs leak.
• BleepingComputer: The article reports on the leak of internal communications from the Black Basta ransomware group.
• arstechnica.com: Report sheds new light on the tactics allowing Black Basta and other attackers to move at breakneck speed.
• mastodon.social: A significant leak of internal chat logs from the Black Basta ransomware group revealed significant operational details.
• securityaffairs.com: Leaked Black Basta chat logs reveal internal conflicts, exposing member details and hacking tools as the gang reportedly falls apart.
• Kali Linux Tutorials: BlackBasta Chat : The Inner Workings Of A Notorious Ransomware Group
• socradar.io: Seraph Stealer Malware Hits the Market, Black Basta’s Internal Chaos, New Data Leak Claims
• thecyberexpress.com: Black Basta Chat Logs Reveal Ransomware Group’s TTPs, IoCs
• DataBreaches.Net: DataBreaches.net reporting Black Basta exposed: A look at a cybercrime data leak and a key member, “Trampâ€�.
• blog.bushidotoken.net: BushidoToken analysis of BlackBasta Leaks: Lessons from the Ascension Health attack
• VERITI: Veriti's analysis of Black Basta's Leaked Chats.

Classification:

• HashTags: #BlackBasta #Ransomware #DataLeak
• Company: Black Basta
• Target: Organizations
• Attacker: Black Basta
• Product: Matrix Chat
• Feature: Internal Chat Logs
• Malware: Black Basta
• Type: DataBreach
• Severity: Major