Black Basta Ransomware Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
July 28, 2026
Last Seen
July 28, 2026

Black Basta Ransomware is a ransomware_group tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.

Black Basta Ransomware is a ransomware_group tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 28, 2026; most recent activity July 28, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Chaos in Teams vishing — Sophos · July 28, 2026

Frequently asked questions

What is Black Basta Ransomware?

Black Basta Ransomware is a ransomware_group tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.

Is Black Basta Ransomware still active?

The most recent intelligence report mentioning Black Basta Ransomware on ThreatCluster is dated July 28, 2026.

What is Black Basta Ransomware associated with?

Across ThreatCluster reporting, Black Basta Ransomware most frequently co-occurs with MuddyWater, Data Breach, Malware, Phishing, Ransomware, among 12 tracked related entities.

What are the latest developments involving Black Basta Ransomware?

The most significant recent cluster is “Vishing Campaigns Target Organizations via Microsoft Teams and New Operator Console” (2 articles · Updated July 29, 2026). Black Basta Ransomware appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on Black Basta Ransomware?

Black Basta Ransomware appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown