Ransomware Group intelligence
Blackbasta
InactiveTrack Blackbasta with 524 published victims and 3 known leak locations in a single intelligence view.
Overview
Blackbasta is tracked by Breach House as a ransomware group with 524 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion |
| Leak location 2 | Onion service | Unknown | aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion |
| Leak location 3 | Onion service | Unknown | bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (524)
Search, filter and paginate the victim timeline for Blackbasta. Showing 401–500 of 524.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | J.M. Rodgers Co. id4381 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ALRO id4380 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | STONE1 id4379 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CSW GmbH id4356 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ALFATECH id4331 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | AMPORTS id4330 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Michael Sullivan & Associates id4329 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MERCOLA id4327 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | SMART Mechanical Solutions id4326 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Quality Telecom Consultants Inc id4325 View details | Telecommunications | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Shiloh Industries id4319 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | The UNITED GRINDING Group id4302 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Willemen Group id4292 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Rick Shipman Construction id4278 View details | Construction / Real Estate | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Gate Precast id4277 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Karl Gemünden GmbH & Co. KG id4264 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Associated Bag id4259 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Cremo id4252 View details | Other | — | ||
|
Cremo is a U.S.-based grooming company in the other sector, with a headquarters listing in Laguna Beach, California. Its public materials describe it as a modern grooming brand and retail presence includes consumer grooming products sold through major channels. Edgewell described Cremo as a premier men’s grooming company in the U.S. when it announced the acquisition in 2020. It was listed as a ransomware victim associated with blackbasta. |
|||||
| Ransomware | AES Clean Technology id4250 View details | United States | IT | — | |
|
No additional victim description available. |
|||||
| Ransomware | Etna GmbH id4245 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | STADLER id4243 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | KOLLITSCH id4234 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Cornerstone Insurance Group id4230 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Admiral Merchants id4216 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Foreman Watson Land Title, LLC. id4215 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CORNERSTONE id4213 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | midway id4198 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MGSMFG id4107 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | EMEPLATING id4106 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | STEVENG id4105 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | SHI id4104 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CleanTech id4092 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | augustacoop id4091 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | psico id4088 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Cpl Architects, Engineers id4082 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | C2CORP id4081 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ttdwest id3926 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MAI id3925 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Montrose Environmental Group, Inc id3924 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | WALLWORKINC id3923 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | paradise id3922 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | WENZEL + WENZEL id3921 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Trade-Mark Industrial Inc. id3920 View details | Canada | Manufacturing / Engineering | — | |
|
No additional victim description available. |
|||||
| Ransomware | CREMO id3919 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | RBBUSA id3918 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | BOERNER-GRUPPE id3917 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Young & Pratt id3916 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Jakob Becker id3915 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Love, Barnes & McKew Insurance Adjusters id3914 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | The O'Regan id3913 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Blairex Laboratories, Inc. id3912 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Wilks Tire & Battery Service id3911 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | UNIWELL Rohrsysteme GmbH & Co. id3910 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Grohmann Aluworks GmbH & Co id3909 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | COS2000 id3833 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | The Minka Group id3832 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | KNAUF id3805 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Wallwork Truck Center id3804 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Dillon Precision Products id3803 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | OLYMPIA id3760 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | The Wiener Zeitung media group id3756 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | LOKALTOG id3755 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | RENZEL id3754 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | LYDECKER id3753 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Wipro HealthPlan Services id3752 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | OLYMPIATILE id3751 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MAIN id3750 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | TMI id3749 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Sierra Pacific Industries id3748 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | DEKIMO id3747 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Jinny Beauty Supply id3746 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Roche Bobois id3745 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | LOSSEWERK id3744 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | SCHMIDT Gruppe Service GmbH id3743 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | JBKLDMN id3742 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | DPP id3737 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CAPSONIC id3722 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | V2 Logistics Corp id3721 View details | Transportation / Travel / Logistics | — | ||
|
No additional victim description available. |
|||||
| Ransomware | New Peoples Bank id3698 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Elbit Systems of America id3686 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Canaropa id3676 View details | Canada | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Mechanical Systems Company id3675 View details | United States | Services | — | |
|
No additional victim description available. |
|||||
| Ransomware | Crane Carrier Company id3674 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | PARADOX id3673 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | GRUPO mh id3672 View details | Spain | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | RadiciGroup id3643 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Bernd Hösele Group id3628 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | SDZ Druck und Medien id3623 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Tiroler Rohre GmbH id3618 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Worldwide Flight Services id3617 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | English Construction Company id3609 View details | United States | Construction / Real Estate | — | |
|
No additional victim description available. |
|||||
| Ransomware | Losberger De Boer id3608 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Groupe J.F. Nadeau Inc id3570 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | JBS TEXTILE GROUP id3569 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CAVENDERS id3568 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | BLAIR inc. id3555 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | undefined id3548 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | AGCO id3532 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Allports Group id3518 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Elkuch Group id3495 View details | Services | — | ||
|
No additional victim description available. |
|||||