Index live· 1,284 files · 148 editions
ForensicPost

Search the index

15 results
Try
Results for “Black Basta”Newest first
25-0227
File

Blockchain Analysis Put Black Basta Receipts Above $107 Million

A floor from a public ledger and a ceiling from an interested party are not the same kind of object. This corpus has not always said which it was holding.

Black BastaExtortionMultipleVerification
Sev 4TargetNot applicableActorBlack Basta
25-0226
File

The Black Basta Archive Is the Best Primary Source Here and a Sample of One

The most sensitive coordination in any organisation is the least likely to be typed. The archive is a survivorship sample of itself.

Black BastaMultipleMethod
Sev 2TargetNot applicableActorBlack Basta
25-0225
File

Black Basta Chats Show Shift Complaints and a Business-Data Subscription

An operation that runs on rotas, subscriptions and payment disputes does not require exceptional people. That is what makes it reproducible.

Black BastaCriminalAnalysis
Sev 3TargetNot applicableActorBlack Basta
25-0223
File

For One Group, for One Year, the Claim Can Be Checked

Exaggeration implies the figure was a distorted measurement. This suggests it was not a measurement.

Black BastaMultipleVerification
Sev 3TargetNot applicableActorBlack Basta
25-0222
File

A Researcher Named Him. This Desk Will Not

Applying the rule to a ransomware leader is the case that tests whether it is a rule or a preference. If it only holds for sympathetic subjects it is not a rule.

Black BastaCriminalMethod
Sev 2TargetNot applicableActorBlack Basta
25-0220
File

Black Basta's Email-Bombing and Teams Impersonation Outlived the Group

The second move works because the first one is real. The employee has a genuine problem, and internal IT has arrived unprompted to solve it.

Black Basta and successorsSocial engineeringMultipleIdentity
Sev 4TargetEnterprise staffActorBlack Basta and successors
25-0218
File

Black Basta Stopped Posting Victims With No Seizure and No Arrests

“Group X has been dismantled” is the form the good news usually takes in this field. It describes the destruction of the cheapest component.

InternalDisclosureCriminalEnforcement
Sev 3TargetBlack BastaActorInternal
25-0216
File

Southern Water Disclosed £4.5 Million of Costs From the Black Basta Attack

Response cost and extortion demand are different quantities. The phrase “the attack cost £4.5m” invites the error of treating them as one.

Black BastaWaterCost
Sev 4TargetSouthern WaterActorBlack BastaUnited Kingdom
25-0215
File

Leaked Chats Show Black Basta Priced Demands off Commercial Revenue Data

If the demand is a function of revenue, the volume figure attached to it is decoration — and the attacker had no incentive to count accurately.

Black BastaExtortion pricingMultipleVerification
Sev 4TargetMultiple, unidentifiedActorBlack Basta
25-0212
File

Leaked Black Basta Chats Referenced 62 CVEs, 53 Exploited in the Wild

Patch windows are argued about as though the attacker learns of a flaw when the defender does. Here the advisory was not the starting gun.

Black BastaVulnerability exploitationMultipleExploitation
Sev 4TargetEnterprise edge estateActorBlack Basta
25-0211
File

ExploitWhispers Published 200,000 Internal Black Basta Chat Messages

The operation describing itself, to itself, with no expectation of being read. Nearly everything else in this corpus is an attacker described from outside.

ExploitWhispersInsider disclosureCriminalPrimary source
Sev 5TargetBlack BastaActorExploitWhispers
24-1219
File

Ascension Disclosed Its Data Figure Seven Months After the Outage

The corpus does not record availability harm less because it matters less. It records it less because nothing compels anyone to measure it.

Black BastaMalicious file downloadHealthcareDisclosure
Sev 5TargetAscensionActorBlack BastaUSA
24-0509
File

Ascension Traced Its Intrusion to an Employee Downloading a Malicious File

A hundred and forty hospitals losing their record system is not a proportionate consequence of one download. What sits between is everything it was allowed to reach.

Black BastaMalicious file downloadHealthcareIdentity
Sev 5TargetAscensionActorBlack BastaUSA
24-0508
File

A Hundred and Forty Hospitals, and the Records Went to Paper

The fallback held for a month across 140 hospitals — because enough staff had worked that way before. That is a resource with a retirement date.

Black BastaMalicious file downloadHealthcareAvailability
Sev 5TargetAscensionActorBlack BastaUSA
23-0331
File

Capita Took 58 Hours to Quarantine the Device That Started Its Breach

The alert fired in ten minutes. The device stayed on the network for 58 hours.

Black BastaMalicious file executionPublic sectorThird party
Sev 5TargetCapitaActorBlack BastaUnited Kingdom
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging