Cyber Resilience

Threat actor · all actors

BlackBastaMISP-9db5f425 criminal

aka BlackBasta

Last updated: 2026-08-20

0attributed CVEs
1ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
years active

About this actor

Black Basta is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.

How we know this

Data origin
MISP threat-actor galaxy Imported from the open-source MISP threat-actor galaxy.
Techniques
Curated — 1 ATT&CK technique on file.
Named victims
None on file.

Thin data: Only 1 ATT&CK technique mapped — a thin behavioural profile; absence is not evidence of a narrow toolkit.

See how actor data is built for the full pipeline.

Activity timeline

No activity events recorded.

Profile

CVERiskCVSSEPSSPublishedProducts
No attributed CVEs.

Co-occurring actors

None.

Similar actors

Same category