Back in Black… Basta

Key Points

BlackBasta emerged in February 2022 with double extortion ransomware attacks against organizations

The threat group exfiltrates sensitive information from organizations before performing file encryption and demanding a ransom payment

The previous version of BlackBasta shared many similarities to the now defunct Conti ransomware, although the malware code itself was novel

In November 2022, BlackBasta ransomware received significant updates including the file encryption algorithms, introduction of stack-based string obfuscation, and per victim file extensions

The ransomware code modifications are …

back basta