Blackbasta

Compare
blackbasta logo blackbasta logo
Parsing: enabled

View crypto

Description

BlackBasta emerged in April 2022 and is widely assessed to be operated by former Conti group members. It functions as a Ransomware-as-a-Service (RaaS), leveraging a double-extortion model—encrypting data and threatening public leaks on its Tor-based site. The malware supports Windows and Linux/VMware ESXi environments, using ChaCha20 for encryption with RSA-4096 for key protection. Encrypted files are appended with the .basta extension, and a ransom note (readme.txt) provides negotiation instructions. BlackBasta has hit victims across manufacturing, construction, healthcare, government, and critical infrastructure sectors, with confirmed targets in the U.S., Canada, U.K., Australia, and New Zealand. Initial access vectors include exploitation of known vulnerabilities (e.g., QakBot infections, ZeroLogon, PrintNightmare), phishing, and purchasing credentials from Initial Access Brokers. By mid-2024, BlackBasta was among the top five most active ransomware groups worldwide.

External Analysis4
External Analysis
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-131a
https://www.sentinelone.com/labs/blackbasta-ransomware-group-an-analysis/
https://www.trendmicro.com/en_us/research/22/f/blackbasta-ransomware-attacks-target-windows-and-linux.html
https://www.bleepingcomputer.com/news/security/blackbasta-ransomware-linked-to-conti-gang/
Ransom notes5
Urls1
Url
Status
Screen
Uptime 30d
Health
http://stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion/ Down Screen
File servers12
Url
Status
Screen
Uptime 30d
Health
http://6y2qjrzzt4inluxzygdfxccym5qjy2ltyae7vnxtoyeotfg3ljwqtaid.onion/ Down Screen
http://r6qkk55wxvy2ziy47oyhptesucwdqqaip23uxregdgquq5oxxlpeecad.onion/ Down Screen
http://weqv4fxkacebqrjd3lmnss6lrmoxoyihtcc6kdc6mblbv62p5q6skgid.onion/ Down Screen
http://thesiliconroad1.top/ Down Screen
0%
http://stuffstevenpeters4.top/ Down Screen
0%
http://greenmotors5.top/ Down Screen
0%
http://megatron3.top/ Down Screen
http://fmzipzpirdpfelbbvnfhoehqxbqg7s7efmgce6hpr5xdcmeazdmic2id.onion/ Down Screen
http://daulpxe3epdysjozaujz4sj7rytanp4suvdnebxkwdfcuzwxlslebvyd.onion/ Down Screen
http://databasebb3.top/ Down Screen
0%
http://l6zxfn3u2s4bl4vt3nvpve6uibqn3he3tgwdpkeeplhwlfwy3ifbt5id.onion/ Down Screen
http://onlylegalstuff6.top/ Down
Chat servers3
Url
Status
Screen
Uptime 30d
Health
https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion Down Screen
https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion:80/ Down
http://ond5arqab77n6tykvi4aqp7oqegqdfgqfyf7fzyhfyhmbp7iafpzdtad.onion/ Down
Admin servers1
Url
Status
Screen
Uptime 30d
Health
http://bpeln2aqs66qqfuex2cvcyjiy5ggcwbyh5nbmxzxt6daamkmpmufv4qd.onion/ Down
Activity (interactive) 490
Activity charts
Posts490
Date Title Description Screen
schuff.com Schuff Steel Company is one of the largest structural steel fabrication and erection companies in the United States, founded in 1976 by Dave Schuff and his son, Scott. The company specializes in providing comprehensive services for commercial and industrial construction projects, including high-rise buildings, sports arenas, hospitals, and more.SITE: www.schuff.comADDRESS: 3003 N. Central Avenue, Suite 1500 Phoenix, AZ 85012 United StatesTEL#: (602) 252-7787ALL DATA SIZE: ≈800gb 1. Financial data 2. Personal employees data, docs, forms… 3. Confidential, NDA’s 4. Engeneering, Projects, Drawings… & etc…
granbyindustries.com Granby Industries, founded in 1954, is a leading manufacturer and distributor of storage tanks and heating products in North America. The company is headquartered in Cowansville, Quebec, Canada, and operates primarily in the United States and Canada.SITE: www.granbyindustries.comADDRESS: 98, rue des Industries Cowansville, Quebec J2K 0A1 CanadaTEL#: (800) 839-2070ALL DATA SIZE: ≈1.2tb 1. Corp data, Financial data, Accounting, Payroll 2. Personal employees data and documents 3. Human Resources, Personal info forms, Tax forms 4. R&D, Engeneering, Drawings, Projects & etc…
plasmatherm.com Plasma-Therm is a prominent global manufacturer specializing in advanced plasma-processing equipment, particularly for the semiconductor industry. Established over 50 years ago, the company provides essential technologies such as etching, deposition, and plasma dicing, which are integral to various applications including semiconductor packaging, solid-state lighting, MEMS (Micro-Electro-Mechanical Systems), and renewable energy.SITE: www.plasmatherm.comADDRESS: 10050 16th Street North Saint Petersburg, FL 33716 United StatesTEL#: +1 (727) 577-4999ALL DATA SIZE: ≈1.5tb+ 1. Financial data, Accounting 2. Contracts, Confidential, NDA’s 3. Home folders, Personal employees data 4. CAD, Projects, Drawings 5. Human Resources 6. R&D, Engeneering 7. Customers data & etc…
arunestates.co.uk Arun Estates is an independent estate agency based in the South East of England, established in 1991. It operates over 100 branches under multiple trading brands, making it one of the largest independent estate agents in the region. The company specializes in a variety of property services, including residential sales, lettings, financial services, conveyancing, and land development.SITE: www.arunestates.co.ukADDRESS: St. Leonard’s House North Street Horsham, West Sussex RH12 1RJ, United KingdomTEL#: +44 1403 282400ALL DATA SIZE: ≈1.5tb+ 1. Financial data, Accounts 2. Human Resources 3. Home folders, Personal employees data and documents 4. Personal clients(customers) data and documents 5. Confidential documents, NDA’s… 6. Branch data… & etc…
brachot.com Brachot is a leading specialist in natural stone and blended materials, operating under the name Brachot-Hermant. The company offers a diverse portfolio that includes ceramics, marble composites, and various natural stones for both interior and exterior applications. Established as a wholesaler, Brachot has expanded into an international player with multiple production sites and quarries across several countries.SITE: www.brachot.comADDRESS: E 3 Laan 86 9800 Deinze BelgiumTEL#: +32 9 381 81 81ALL DATA SIZE: ≈600gb+ 1. Departments data 2. Financial data 3. Home folders, Personal employees data and documents 4. Accounting 5. CAD data, drawings & etc…
avril.ca Avril Supermarché Santé, an independent health food supermarket chain based in Quebec, Canada. Founded in 1995, Avril aims to promote a healthy lifestyle by making natural and organic products accessible to everyone. The company operates multiple stores across Quebec and offers a wide range of products, including groceries, supplements, beauty items, and ready-to-eat meals.SITE: www.avril.caADDRESS: 11 rue Évangéline Granby, Quebec, J2G 6N3 Canada.TEL#: 1-844-375-6446ALL DATA SIZE: ≈550gb+ 1. Financial data, Accounting 2. Human Resources 3. Personal employees documents 4. DirectionMagasin 5. Marketing & etc…
migonline.com Mortgage Investors Group (MIG) is a prominent mortgage lender based in the Southeast United States, specifically established in 1989 in Knoxville, Tennessee. The company specializes in providing a variety of home financing solutions, including conventional and government-backed loans, aimed at making homeownership accessible and enjoyable for its clients.SITE: www.migonline.comADDRESS: 8320 E Walker Springs Ln Ste 200 Knoxville, Tennessee, 37923 United StatesTEL#: (865) 691-7714ALL DATA SIZE: ≈1.5tb+ 1. Financial data, Accounting 2. Contracts, Loans data 3. Home folders, Personal employees and clients documents 4. Personal clients(customers) data and documents 5. Personal forms 6. Confidential data & etc…
bnext.nl Bnext.nl is a Dutch company specializing in sustainable waste management and recycling, particularly in the construction and demolition sectors. Established in 1992, Bnext has evolved from a supporting agency in demolition and infrastructure to a significant player in the recycling of construction materials and the processing of industrial waste.SITE: www.Bnext.nlADDRESS: Ankerweg 16 1041 AT Amsterdam NetherlandsTEL#: +31 (0) 88 260 01 12ALL DATA SIZE: ≈500gb+ 1. Financial data, Accounting 2. Contracts, Confidential data 3. Personal employees data 4. Projects data & etc…
activedynamics.com Screen
bender.de Screen
fote.com Screen
furmanos.com Screen
valveworksusa.com Screen
wikov.com Screen
grimaldialliance.com Screen
bathfitter.com Screen
medion.com Screen
hamptonsecurities.com Screen
g-s.co.uk Screen
cafezupas.com Screen
westbankcorp.com Screen
btci.com Screen
beko-technologies.com Screen
snatt.it Screen
medicacorp.com
lornestewartgroup.com
vossko.de
rembe.de Screen
rauch.de Screen
wachter.com Screen
rockportmortgage.com Screen
kmcglobal.com Screen
jonti-craft.com Screen
isaitaly.com Screen
instinctpetfood.com Screen
gfemlaw.com Screen
eatonmetal.com Screen
continentalserves.com Screen
suit-kote.com Screen
mithun.com Screen
mcleanmortgage.com Screen
andyfrain.com Screen
weberpackaging.com Screen
rosenlegal.com Screen
daserv.com Screen
celo.com Screen
tuggleduggins.com Screen
lewa.com Screen
temple-inc.com Screen
ssbwc.com Screen
milleredge.com Screen
gkcorp.com Screen
gfm-uk.com Screen
caseparts.com Screen
thompsoncreek.com Screen
northernsafety.com Screen
memc.com
thompsoncreek.com_wa
atos.com
posiplus.com
hpecds.com
lambertz.de
keybenefit.com
scrubsandbeyond.com
keybenefit.com_wp
scrubsandbeyond.com_wp
wielton.com.pl
grupoamper.com
pkaufmann.com
modplan.co.uk
mgfsourcing.com
talalayglobal.com
akdenizchemson.com
dynasafe.com
robson.com
elutia.com
ssiworld.com
driver-group.com
keytronic.com
mfgroup.it
grupocadarso.com
atlasoil.com
trugreen.com
levian.com
lactanet.ca
cmactrans.com
ids-michigan.com
provencherroy.ca
swisspro.ch
olsonsteel.com
teaspa.it
ayesa.com
synlab.com
active-pcb.com
gai-it.com
thelawrencegroup.com
bdcm.com
thelawrencegroup.com_privat
true.co.uk
fluenthome.com
macphie.com
cavotec.com
hymer-alu.de
azdel.com
doyon.com | doyondrilling.com
processsolutions.com
numotion.com
siemensmfg.com
Parklane Group
sermo.com
schlesingerlaw.com
robar.com
atlascontainer.com
patersoncooke.com
arch-con.com
columbiapipe.com
pdq-airspares.co.uk
prodrive.com
dgse.com
bulwarkpestcontrol.com
lagunitas.com
carolinafoodsinc.com
ero-etikett.com
amerlux.com
organizedliving.com
mjcelco.com
kmbdg.com
pctinternational.com
theshootingwarehouse.com
vilis.com
pstrans.com
fpdcompany.com
northamericansigns.com
otrwheel.com
flynncompanies.com
igf-inc.com
logistasolutions.com
oceaneering.com
interluxury.com
activeconceptsllc.com
gfad.de
duvel.com | boulevard.com
xcelbrands.com
cpacsystems.se
elmatic.de
keystonetech.com
dutyfreeamericas.com
sierralobo.com
contechs.co.uk
creativeenvironments.com
linksunlimited.com
imperialtrading.com
hvd.host
goodinabernathy.com
scullionlaw.com
fcw.ch
haas4.com
alanritchey.com
team.jobs
birchallfoodservice.co.uk
dilweg.com
zircodata.com
nfllp.com
climatech.com
usmerchants.com
dasteam.ch
pacifica.co.uk
barberemerson.com
ffppkg.co.uk
patriziapepe.com
btl.info
globalrescue.com
ssmnlaw.com
leonardssyrups.com
willislease.com
asecos.com
sipicorp.com
leclairgroup.com
fairmontfcu.com
ktbslaw.com
dupont-restauration.fr
kivibros.com
haes.ca
cinfab.com
prudentpublishing.com
unitedindustries.co.nz
stemcor.com
envea.global
agc.com
southernwater.co.uk
graebener-group.com
leonardsexpress.com
nals.com
americanalarm.com
whafh.com
hotelplan.co.uk
brintons.co.uk
pecofoods.com
navitaspet.com
vyera.com
hallidays.co.uk
kohlwholesale.com
thirdstreetbrewhouse.com carolinabeveragegroup.com
agy.com
alexander-dennis.com
nlt.com
inseinc.com
andersonandjones.com
jacobsfarmdelcabo.com
agrovi.dk
arenaproducts.com
etude-villa.fr
edc.dk
uchlogistics.co.uk
citycontainer.dk
cmcsheetmetal.com
rekord.de
boulangerieauger.com
maytec.de
agromatic.de
shopbentley.com
ayakitchens.com
browardfactory.com
boslogistics.eu
califanocarrelli.it
h-tube.com
nicecloud.nl
cozwolle.nl
torrescpa.com
tt-engineering.nl
triflex.nl
acawtrustfunds.ca
secci.ca
sacksteinlaw.com
volex.com
imancorp.es
strongtie.com
ampersand.tv
baccarat.com
piemmeonline.it
fortive.com
gannons.co.uk
gsp.com.br
edwardian.com
bionpharma.com
stantonwilliams.com
hugohaeffner.com
intred.it
VOLEX.COM
Fortive Corporation
Panificio Grandolfo
Panetteria Grandolfo
Simpson Strong-Tie
STANTON WILLIAMS
Edwardian Hotels London
HAFFNER GmbH Co.
Intred
Ampersand
BACCARAT
PIEMME S.p.A.
NCC_2
DOMAIN-BACCARAT_2
STANTONWILLIAMS
REH
HAEFFNER-ASP
GREGAGG
DELTECNT
DMAXIM
TRE-GRUPPE
PRESTIGE
SHO_2
SBP
LEHIGHONE
WCC
02_SVD
GROUPHC
ESTECH
ASI
RHA
ARROWAVIATIONCO
ABTBANK
ALLIANCE
DEUTSCHELEASING
VDVEN
SYNQUESTLABS
TWINTOWER
All States Ag Parts
EDVMS
BION_2
Bartlett
Blount Fine Foods
GraphTec
MODERNIND_2
GIAMBELLI
M&M Industries
MORSEMOVING
Marchant Schmidt
Hill AeroSystems Inc.
Regal West Corporation
TAGAVIA
RoadSafe Traffic Systems
BOBST
SLTAD_2
McCarthy Fingar
Rheinmetall AG
AVIAREPS
FR
Carrington
Lincoln Wood Products
MEADE TRACTOR
Gates Corporation
HEICO
David S. Brown Enterprises
WSVN
Franklin Mutual Insurance
DATA MODUL
KLINE-SPECTER
The Spooner Risk Control
DeMontfort Fine Art
TAMMAC
COACHCOMM
BLUME
AUTOCAM MEDICAL
mastercorp
Colvillbanks
restorationmanagement
DOREL Industries
Yellow Pages
GTT
Anton Paar
County Materials Corporation
Advance America
fflawoffice
Tri Counties Bank
SUPPLYCORE
KWS_2
DUKANE
VLS
rockinsurancebrokers
Kittle’s
UPONOR
Jeppesen
Sterling
Petmate
Maney | Gordon | Zeller, P.A.
Atcore
Dingbro Ltd
A.R. Thomson Group
Cleveland Brothers
AIRCOMECHANICAL
Panolam Surface Systems
SEACAST
Pella
nworksllc
PANOLAM
Maple Leaf Foods
Motivating Graphics
ITM
IMA Financial Group, Inc.
Kessing Rechtsanwälte und Fachanwälte in PartGmbB
METRO
Wilken Software Group
MITCON Consultancy & Engineering Services Limited
Popp Hutcheson PLLC
Genesys Aerosystems
Bitron
STECINT_2
BITRON2
Associated Lighting Representatives
CADEPLOY
Essick Air Products
Diamond Mowers
EDC3
J.M. Rodgers Co.
ALRO
STONE1
TSC
ESSICKAIR
METASYS
A G Equipment Company
BOOTZ
ALFATECH
AMPORTS
CSW GmbH
SMART Mechanical Solutions
Quality Telecom Consultants Inc
Michael Sullivan & Associates
Shiloh Industries
MERCOLA
Willemen Group
Gate Precast
The UNITED GRINDING Group
Rick Shipman Construction
Karl Gemünden GmbH & Co. KG
Etna GmbH
Associated Bag
STADLER
AES Clean Technology
KOLLITSCH
Cornerstone Insurance Group
Admiral Merchants
Foreman Watson Land Title, LLC.
CORNERSTONE
Cremo
midway
EMEPLATING
STEVENG
SHI
MGSMFG
CleanTech
ADTRANSPORT
psico
augustacoop
C2CORP
KNAUF
ttdwest
COS2000
LYDECKER
LOKALTOG
The Wiener Zeitung media group
Wipro HealthPlan Services
MAI
The Minka Group
RENZEL
New Peoples Bank
OLYMPIA
Montrose Environmental Group, Inc
Elbit Systems of America
CAPSONIC
WALLWORKINC
WENZEL + WENZEL
Trade-Mark Industrial Inc.
Sierra Pacific Industries
DEKIMO
Canaropa
Mechanical Systems Company
Crane Carrier Company
Cpl Architects, Engineers
CREMO
PARADOX
GRUPO mh
DPP
Bernd Hösele Group
Jinny Beauty Supply
RBBUSA
Tiroler Rohre GmbH
RadiciGroup
LOSSEWERK
BOERNER-GRUPPE
SDZ Druck und Medien
Worldwide Flight Services
SCHMIDT Gruppe Service GmbH
Young & Pratt
Jakob Becker
English Construction Company
Groupe J.F. Nadeau Inc
JBS TEXTILE GROUP
Love, Barnes & McKew Insurance Adjusters
The O'Regan
Allports Group
Elkuch Group
Blairex Laboratories, Inc.
BLAIR inc.
Losberger De Boer
AGCO
Contractors Pipe and Supply Corporation
CAVENDERS
Flexible Circuit Technologies
Rollecate Group
Zito Media
Black Bros. Co.
Sole Technology
Piggly Wiggly Alabama Distributing Company
Wilks Tire & Battery Service
Jameco Electronics
UNIWELL Rohrsysteme GmbH & Co.
TÜV NORD GROUP
Plauen Stahl Technologie GmbH
Oralia
Boswell Engineering
LECHLER S.p.A.
Laiteries Reunies Societe cooperative
IMA Schelling Group
The Scholz Group
LACKS
Basler Versicherungen
Deutsche Windtechnik
Grohmann Aluworks GmbH & Co
PRGX Global Inc.
Ragle Incorporated
Note