Storm-1811

Threat Spotlight: Hijacked and Hidden: New Backdoor and Persistence Technique - ReliaQuest

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Spotlight: Hijacked and Hidden: New Backdoor and Persistence Technique - ReliaQuest

A_Deep_Dive_into_the_Leaked_Black_Basta_Chat_Logs.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A_Deep_Dive_into_the_Leaked_Black_Basta_Chat_Logs.pdf

An in-depth look at Black Basta's TTPs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An in-depth look at Black Basta's TTPs

Anastasia-Inside-BlackBasta.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Anastasia-Inside-BlackBasta.pdf

Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)

Black Basta’s blunder: exploiting the gang’s leaked chats

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta’s blunder: exploiting the gang’s leaked chats

Inside BRUTED: Black Basta (RaaS) Members Used Automated Brute Forcing Framework to Target Edge Network Devices

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside BRUTED: Black Basta (RaaS) Members Used Automated Brute Forcing Framework to Target Edge Network Devices

Deciphering Black Basta’s Infrastructure from the Chat Leak

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Deciphering Black Basta’s Infrastructure from the Chat Leak

Initial Takeaways from the Black Basta Chat Leaks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Initial Takeaways from the Black Basta Chat Leaks

Black Basta Leak Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Leak Analysis

Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal

/var/log/notes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor /var/log/notes

Ransomware : de REvil à Black Basta, que sait-on de Tramp ?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware : de REvil à Black Basta, que sait-on de Tramp ?

Black Basta exposed: A look at a cybercrime data leak

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta exposed: A look at a cybercrime data leak

Agent AI, Basta Parser Extraordinaire

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Agent AI, Basta Parser Extraordinaire

CrowdStrikeGlobalThreatReport2025.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CrowdStrikeGlobalThreatReport2025.pdf

BlackBasta Leaks: Lessons from the Ascension Health attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackBasta Leaks: Lessons from the Ascension Health attack

Inside BlackBasta: What Leaked Conversations Reveal About Their Ransomware Operations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside BlackBasta: What Leaked Conversations Reveal About Their Ransomware Operations

48 Minutes: How Fast Phishing Attacks Exploit Weaknesses

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 48 Minutes: How Fast Phishing Attacks Exploit Weaknesses

TRACKING RANSOMWARE : JANUARY 2025 - CYFIRMA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TRACKING RANSOMWARE : JANUARY 2025 - CYFIRMA

Ongoing Email Bombing Campaigns leading to Remote Access and Post-Exploitation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Email Bombing Campaigns leading to Remote Access and Post-Exploitation

Unit42-timely-threat-intel/2025-01-17-IOCs-for-infrastructure-used-by-affiliate-of-Dark-Scorpius.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Unit42-timely-threat-intel/2025-01-17-IOCs-for-infrastructure-used-by-affiliate-of-Dark-Scorpius.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel

Qbot is Back.Connect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Qbot is Back.Connect

Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

ReliaQuest Uncovers New Black Basta Social Engineering Technique

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ReliaQuest Uncovers New Black Basta Social Engineering Technique

Phish, Click, Breach: Hunting for a Sophisticated Cyber Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Phish, Click, Breach: Hunting for a Sophisticated Cyber Attack

Ongoing Social Engineering Campaign Refreshes Payloads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Social Engineering Campaign Refreshes Payloads

UNC4393 Goes Gently into the SILENTNIGHT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UNC4393 Goes Gently into the SILENTNIGHT

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog

Intelligence Insights: June 2024

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Intelligence Insights: June 2024

Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat actors misusing Quick Assist in social engineering attacks leading to ransomware | Microsoft Security Blog

Stairwell threat report: Black Basta overview and detection rules - Stairwell

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Stairwell threat report: Black Basta overview and detection rules - Stairwell

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

#StopRansomware: Black Basta | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor #StopRansomware: Black Basta | CISA

m-trends-2024.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2024.pdf

Spam trends campaigns senior superlatives 2023

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Spam trends campaigns senior superlatives 2023

m_trends_2023_report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m_trends_2023_report.pdf

March 2023 broke ransomware attack records with 459 incidents

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor March 2023 broke ransomware attack records with 459 incidents

1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

PwC Cyber Threats 2022: A Year in Retrospect.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor PwC Cyber Threats 2022: A Year in Retrospect.pdf

QBot: Laying the Foundations for Black Basta Ransomware Activity

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor QBot: Laying the Foundations for Black Basta Ransomware Activity

TA444- The APT Startup Aimed at Acquisition (of Your Funds)

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TA444- The APT Startup Aimed at Acquisition (of Your Funds)

TA444: APT Startup Aimed at Acquisition (of Your Funds) | Proofpoint US

Malpedia library date Proofpoint fromORKLCCS '25 data

Archived copy on ORKL Detailsfor TA444: APT Startup Aimed at Acquisition (of Your Funds) | Proofpoint US

Black Basta - Technical Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta - Technical Analysis

Back in Black... Basta | Zscaler

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Back in Black... Basta | Zscaler

THREAT ALERT: Aggressive Qakbot Campaign and the Black Basta Ransomware Group Targeting U.S. Companies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor THREAT ALERT: Aggressive Qakbot Campaign and the Black Basta Ransomware Group Targeting U.S. Companies

Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor

Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike

Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Ransomware Spotlight: Black Basta

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Spotlight: Black Basta

Threat Assessment: Black Basta Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Assessment: Black Basta Ransomware

Luna and Black Basta — new ransomware for Windows, Linux and ESXi

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Luna and Black Basta — new ransomware for Windows, Linux and ESXi

Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit

Black Basta Ransomware Emerging From Underground to Attack Corporate Networks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Emerging From Underground to Attack Corporate Networks

Cyber Security Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Security Research

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Examining the Black Basta Ransomware’s Infection Routine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Examining the Black Basta Ransomware’s Infection Routine

German wind farm operator confirms cybersecurity incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor German wind farm operator confirms cybersecurity incident

New Black Basta ransomware springs into action with a dozen breaches

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Black Basta ransomware springs into action with a dozen breaches

American Dental Association hit by new Black Basta ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor American Dental Association hit by new Black Basta ransomware

What is ransomware?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What is ransomware?

Cardinal RAT Sins Again, Targets Israeli Fin-Tech Firms

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Cardinal RAT Sins Again, Targets Israeli Fin-Tech Firms