Dark Basin
Dark Basin is an India-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 4 sectors, including Government and Manufacturing, in 22 countries, including the United States and the United Kingdom.
- Mercenary.Amanda
- Origin
- India
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2013
- Record updated
Who They Target.
About Dark Basin.
Dark Basin is a hack-for-hire group that has targeted thousands of individuals and hundreds of institutions on six continents. Targets include advocacy groups and journalists, elected and senior government officials, hedge funds, and multiple industries. Dark Basin extensively targeted American nonprofits, including organisations working on a campaign called #ExxonKnew, which asserted that ExxonMobil hid information about climate change for decades. We also identify Dark Basin as the group behind the phishing of organizations working on net neutrality advocacy, previously reported by the Electronic Frontier Foundation. We link Dark Basin with high confidence to an Indian company, BellTroX InfoTech Services, and related entitie.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.