🏹 blackbasta — Ransomware
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Classification
Ransomware
Leak-site victims
523
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (523)
| Victim | Country | Published | Domain |
|---|---|---|---|
| bnext.nl | NL | 2025-01-11T11:21:18.483786+00:00 | bnext.nl |
| plasmatherm.com | US | 2025-01-11T11:30:49.420939+00:00 | plasmatherm.com |
| brachot.com | BE | 2025-01-11T11:26:37.319590+00:00 | brachot.com |
| avril.ca | CA | 2025-01-11T11:24:30.500093+00:00 | avril.ca |
| migonline.com | US | 2025-01-11T11:23:24.949208+00:00 | migonline.com |
| arunestates.co.uk | GB | 2025-01-11T11:28:42.902704+00:00 | arunestates.co.uk |
| bathfitter.com | CA | 2024-12-18T12:05:08.905174+00:00 | bathfitter.com |
| grimaldialliance.com | IT | 2024-12-18T12:02:07.526883+00:00 | grimaldialliance.com |
| medion.com | DE | 2024-12-18T11:59:03.151058+00:00 | medion.com |
| valveworksusa.com | US | 2024-12-18T13:51:28.756810+00:00 | valveworksusa.com |
| granbyindustries.com | US | 2025-01-11T11:32:55.117799+00:00 | granbyindustries.com |
| wikov.com | CZ | 2024-12-18T13:48:24.354934+00:00 | wikov.com |
| schuff.com | US | 2025-01-11T11:35:01.458980+00:00 | schuff.com |
| activedynamics.com | CA | 2024-12-18T12:08:10.044123+00:00 | activedynamics.com |
| snatt.it | IT | 2024-12-04T12:54:46.055860+00:00 | snatt.it |
| lornestewartgroup.com | GB | 2024-12-04T12:50:41.939620+00:00 | lornestewartgroup.com |
| vossko.de | DE | 2024-12-04T12:47:38.700821+00:00 | vossko.de |
| medicacorp.com | US | 2024-12-04T12:53:44.248682+00:00 | medicacorp.com |
| fote.com | US | 2024-12-18T13:57:31.976426+00:00 | fote.com |
| rembe.de | DE | 2024-11-19T14:20:42.107781+00:00 | rembe.de |
| bender.de | DE | 2024-12-18T13:54:30.327328+00:00 | bender.de |
| beko-technologies.com | DE | 2024-12-04T12:57:48.614145+00:00 | beko-technologies.com |
| gfemlaw.com | US | 2024-11-19T12:10:25.149142+00:00 | gfemlaw.com |
| westbankcorp.com | CA | 2024-12-04T13:03:59.466787+00:00 | westbankcorp.com |
| btci.com | GB | 2024-12-04T13:00:54.657433+00:00 | btci.com |
| g-s.co.uk | GB | 2024-12-04T13:10:03.921716+00:00 | g-s.co.uk |
| cafezupas.com | US | 2024-12-04T13:07:02.940167+00:00 | cafezupas.com |
| rauch.de | DE | 2024-11-19T11:45:04.136288+00:00 | rauch.de |
| andyfrain.com | US | 2024-11-28T11:51:50.294840+00:00 | andyfrain.com |
| hamptonsecurities.com | CA | 2024-12-04T13:13:05.770487+00:00 | hamptonsecurities.com |
| isaitaly.com | IT | 2024-11-19T11:52:09.970708+00:00 | isaitaly.com |
| continentalserves.com | US | 2024-11-19T12:01:15.131266+00:00 | continentalserves.com |
| jonti-craft.com | US | 2024-11-19T11:55:11.187181+00:00 | jonti-craft.com |
| interspiro.com | US | 2024-12-11T11:20:57.372885+00:00 | interspiro.com |
| eatonmetal.com | US | 2024-11-19T12:04:17.720374+00:00 | eatonmetal.com |
| mcleanmortgage.com | US | 2024-11-28T11:58:08.313102+00:00 | mcleanmortgage.com |
| suit-kote.com | US | 2024-11-28T11:54:54.859222+00:00 | suit-kote.com |
| instinctpetfood.com | US | 2024-11-19T12:07:21.699559+00:00 | instinctpetfood.com |
| wachter.com | US | 2024-11-19T11:58:12.263970+00:00 | wachter.com |
| kmcglobal.com | US | 2024-11-19T11:48:06.242044+00:00 | kmcglobal.com |
| furmanos.com | US | 2024-12-18T10:23:27.675652+00:00 | furmanos.com |
| daserv.com | US | 2024-10-29T19:17:35.564909+00:00 | daserv.com |
| celo.com | US | 2024-10-29T19:14:31.242295+00:00 | celo.com |
| rosenlegal.com | US | 2024-10-29T17:25:31.362456+00:00 | rosenlegal.com |
| weberpackaging.com | US | 2024-10-29T17:22:25.346316+00:00 | weberpackaging.com |
| gkcorp.com | US | 2024-10-21T22:44:13.846611+00:00 | gkcorp.com |
| rockportmortgage.com | US | 2024-11-19T11:51:09.446952+00:00 | rockportmortgage.com |
| milleredge.com | US | 2024-10-21T22:47:18.922970+00:00 | milleredge.com |
| lewa.com | AT | 2024-10-21T22:38:01.922090+00:00 | lewa.com |
| ssbwc.com | US | 2024-10-21T22:41:07.998580+00:00 | ssbwc.com |
| gfm-uk.com | GB | 2024-10-14T16:37:39.093756+00:00 | gfm-uk.com |
| tuggleduggins.com | US | 2024-10-24T17:07:38.291432+00:00 | tuggleduggins.com |
| temple-inc.com | US | 2024-10-21T22:50:23.484408+00:00 | temple-inc.com |
| caseparts.com | US | 2024-10-14T16:34:31.889055+00:00 | caseparts.com |
| lambertz.de | DE | 2024-06-30T07:11:48.478508+00:00 | lambertz.de |
| usdermpartners.com | US | 2024-07-15T16:07:34.586363+00:00 | usdermpartners.com |
| atos.com | IT | 2024-07-15T16:06:54.850595+00:00 | atos.com |
| hpecds.com | US | 2024-07-15T17:35:43.730215+00:00 | hpecds.com |
| memc.com | US | 2024-07-22T14:54:12.193606+00:00 | memc.com |
| thompsoncreek.com | CA | 2024-09-16T11:01:43.218692+00:00 | thompsoncreek.com |
| thompsoncreek.com_wa | US | 2024-07-15T14:06:54.152874+00:00 | thompsoncreek.com |
| scrubsandbeyond.com | US | 2024-06-25T08:22:41.993848+00:00 | scrubsandbeyond.com |
| northernsafety.com | US | 2024-09-16T11:02:59.667884+00:00 | northernsafety.com |
| northernsafety.com_wa | US | 2024-07-15T14:06:18.636003+00:00 | northernsafety.com |
| grupoamper.com | ES | 2024-06-17T16:11:05.184042+00:00 | grupoamper.com |
| driver-group.com | GB | 2024-06-06T14:05:18.884147+00:00 | driver-group.com |
| posiplus.com | CA | 2024-07-15T17:36:20.171415+00:00 | posiplus.com |
| dynasafe.com | SE | 2024-06-06T13:40:09.903268+00:00 | dynasafe.com |
| keybenefit.com | US | 2024-06-25T08:24:01.787105+00:00 | keybenefit.com |
| modplan.co.uk | GB | 2024-06-17T16:12:19.853534+00:00 | modplan.co.uk |
| mgfsourcing.com | VN | 2024-06-17T12:12:38.219842+00:00 | mgfsourcing.com |
| pkaufmann.com | US | 2024-06-17T16:12:54.578515+00:00 | pkaufmann.com |
| elutia.com | US | 2024-06-06T14:06:57.876135+00:00 | elutia.com |
| levian.com | US | 2024-05-21T00:52:09.571640+00:00 | levian.com |
| wielton.com.pl | PL | 2024-06-17T16:11:44.964015+00:00 | wielton.com.pl |
| robson.com | US | 2024-06-06T14:07:42.707944+00:00 | robson.com |
| atlasoil.com | US | 2024-05-21T00:42:32.987422+00:00 | atlasoil.com |
| olsonsteel.com | US | 2024-05-04T12:25:42.565057+00:00 | olsonsteel.com |
| keytronic.com | US | 2024-05-31T12:21:11.862528+00:00 | keytronic.com |
| synlab.com | DE | 2024-05-04T12:21:40.119478+00:00 | synlab.com |
| grupocadarso.com | PT | 2024-05-21T00:44:42.256003+00:00 | grupocadarso.com |
| thelawrencegroup.com | US | 2024-05-03T12:26:50.989489+00:00 | thelawrencegroup.com |
| akdenizchemson.com | AU | 2024-06-07T15:57:33.911542+00:00 | akdenizchemson.com |
| ssiworld.com | US | 2024-06-06T14:06:05.335066+00:00 | ssiworld.com |
| trugreen.com | US | 2024-05-21T00:40:25.290460+00:00 | trugreen.com |
| thelawrencegroup.com_privat | US | 2024-04-27T00:17:34.403527+00:00 | thelawrencegroup.com |
| talalayglobal.com | US | 2024-06-07T15:58:21.258687+00:00 | talalayglobal.com |
| mfgroup.it | IT | 2024-05-21T00:46:52.694980+00:00 | mfgroup.it |
| ayesa.com | ES | 2024-05-04T12:23:46.346115+00:00 | ayesa.com |
| active-pcb.com | GB | 2024-05-04T12:20:14.288124+00:00 | active-pcb.com |
| swisspro.ch | CH | 2024-05-04T12:26:31.038959+00:00 | swisspro.ch |
| gai-it.com | IT | 2024-05-04T12:19:15.546529+00:00 | gai-it.com |
| teaspa.it | IT | 2024-05-04T12:24:50.889681+00:00 | teaspa.it |
| lactanet.ca | CA | 2024-05-21T00:49:42.029340+00:00 | lactanet.ca |
| bdcm.com | US | 2024-05-01T04:16:28.302020+00:00 | bdcm.com |
| cavotec.com | CH | 2024-04-19T12:43:06.980235+00:00 | cavotec.com |
| hymer-alu.de | DE | 2024-04-19T12:42:29.302209+00:00 | hymer-alu.de |
| ids-michigan.com | US | 2024-05-04T12:28:17.676282+00:00 | ids-michigan.com |
| fluenthome.com | US | 2024-04-19T12:44:15.596970+00:00 | fluenthome.com |
| provencherroy.ca | CA | 2024-05-04T12:27:19.606610+00:00 | provencherroy.ca |
| doyon.com | doyondrilling.com | US | 2024-04-17T23:48:23.482283+00:00 | doyondrilling.com |
| cmactrans.com | US | 2024-05-04T12:28:57.404258+00:00 | cmactrans.com |
| Parklane Group | GB | 2024-04-09T17:05:09.637133+00:00 | theparklanegroup.com |
| atlascontainer.com | US | 2024-04-09T17:00:58.703249+00:00 | atlascontainer.com |
| patersoncooke.com | ZA | 2024-04-09T17:00:12.036642+00:00 | patersoncooke.com |
| pstrans.com | US | 2024-03-27T21:22:00.428118+00:00 | pstrans.com |
| siemensmfg.com | US | 2024-04-09T17:06:01.142940+00:00 | siemensmfg.com |
| azdel.com | US | 2024-04-19T12:41:40.619350+00:00 | azdel.com |
| processsolutions.com | US | 2024-04-09T17:07:35.828011+00:00 | processsolutions.com |
| schlesingerlaw.com | US | 2024-04-09T17:03:10.623775+00:00 | schlesingerlaw.com |
| oceaneering.com | US | 2024-03-20T17:46:57.493212+00:00 | oceaneering.com |
| mjcelco.com | US | 2024-03-27T19:22:31.292108+00:00 | mjcelco.com |
| kmbdg.com | US | 2024-03-27T19:21:54.426521+00:00 | kmbdg.com |
| pctinternational.com | US | 2024-03-27T19:21:15.119998+00:00 | pctinternational.com |
| sermo.com | US | 2024-04-09T17:04:07.444865+00:00 | sermo.com |
| activeconceptsllc.com | US | 2024-03-18T13:30:36.063057+00:00 | activeconceptsllc.com |
| macphie.com | GB | 2024-04-19T12:43:41.118692+00:00 | macphie.com |
| bulwarkpestcontrol.com | US | 2024-03-27T19:26:22.224292+00:00 | bulwarkpestcontrol.com |
| ero-etikett.com | DE | 2024-03-27T19:24:24.728150+00:00 | ero-etikett.com |
| amerlux.com | US | 2024-03-27T19:23:48.332839+00:00 | amerlux.com |
| organizedliving.com | US | 2024-03-27T19:23:11.019974+00:00 | organizedliving.com |
| contechs.co.uk | GB | 2024-03-12T13:19:00.854867+00:00 | contechs.co.uk |
| lagunitas.com | US | 2024-03-27T19:25:44.154453+00:00 | lagunitas.com |
| carolinafoodsinc.com | US | 2024-03-27T19:25:05.176946+00:00 | carolinafoodsinc.com |
| arch-con.com | US | 2024-04-09T16:59:19.689455+00:00 | arch-con.com |
| prodrive.com | US | 2024-03-27T21:19:12.974505+00:00 | prodrive.com |
| imperialtrading.com | US | 2024-03-12T13:17:02.769840+00:00 | imperialtrading.com |
| theshootingwarehouse.com | US | 2024-03-27T19:20:36.117434+00:00 | theshootingwarehouse.com |
| duvel.com | boulevard.com | BE | 2024-03-12T23:44:44.980072+00:00 | duvelmoortgat.com |
| dgse.com | US | 2024-03-27T21:18:30.596948+00:00 | dgse.com |
| flynncompanies.com | CA | 2024-03-22T11:51:52.699367+00:00 | flynncompanies.com |
| columbiapipe.com | US | 2024-04-09T15:19:08.680564+00:00 | columbiapipe.com |
| otrwheel.com | US | 2024-03-27T21:19:54.534477+00:00 | otrwheel.com |
| linksunlimited.com | US | 2024-03-12T13:17:45.491721+00:00 | linksunlimited.com |
| pdq-airspares.co.uk | GB | 2024-04-01T17:53:10.490511+00:00 | pdq-airspares.co.uk |
| keystonetech.com | US | 2024-03-12T13:20:58.101213+00:00 | keystonetech.com |
| numotion.com | US | 2024-04-09T17:06:49.667178+00:00 | numotion.com |
| scullionlaw.com | GB | 2024-02-29T14:44:17.241401+00:00 | scullionlaw.com |
| northamericansigns.com | US | 2024-03-27T21:20:35.826461+00:00 | northamericansigns.com |
| dutyfreeamericas.com | US | 2024-03-12T13:20:20.987533+00:00 | dutyfreeamericas.com |
| robar.com | US | 2024-04-09T17:02:03.041012+00:00 | robar.com |
| creativeenvironments.com | US | 2024-03-12T13:18:23.129821+00:00 | creativeenvironments.com |
| logistasolutions.com | US | 2024-03-20T17:47:49.885453+00:00 | logistasolutions.com |
| interluxury.com | CH | 2024-03-20T10:14:44.348070+00:00 | interluxury.com |
| sierralobo.com | US | 2024-03-12T13:19:43.413577+00:00 | sierralobo.com |
| xcelbrands.com | US | 2024-03-12T13:22:57.892976+00:00 | xcelbrands.com |
| hvd.host | AU | 2024-02-29T22:17:27.922144+00:00 | hvd.host |
| dasteam.ch | CH | 2024-02-21T12:48:50.707656+00:00 | dasteam.ch |
| fpdcompany.com | US | 2024-03-27T21:21:18.316817+00:00 | fpdcompany.com |
| cpacsystems.se | SE | 2024-03-12T13:22:19.380449+00:00 | cpacsystems.se |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron