BlackBasta
BlackBasta is a ransomware group with a financial motive, tracked by Brandefense. It targets 17 sectors, including Government and Technology, in 29 countries, including the United States and the United Kingdom. It uses 98 MITRE ATT&CK techniques and exploits 65 known CVEs.
- Black Basta Team
- Techniques
- 98
- Exploited CVEs
- 65
- First seen
- Jun 10, 2022
- Last seen
- Dec 9, 2025
- Record updated
Who They Target.
About BlackBasta.
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.