Leaked chat logs reveal inner workings of secretive Ransomware group

Researchers have read the Russian language texts and said that they revealed internal rifts within the secretive organization which have escalated ever since one of its leaders has been arrested. This increases the risk of other members also being tracked down. The increased tensions have led to growing rifts among the current leader and his subordinates. One of the disagreements was his decision to target the bank in Russia. This put Black Basta into the crosshairs for law enforcement in this country.

A researcher at Prodraft said that Oleg, the boss of the group, was dictating the operations based on his personal financial interests, disregarding those of the team.was written. “Under his administration there was a brute-force attack on the infrastructures of some Russian banks.” It appears that law enforcement has not taken any measures, which could be a serious issue and prompt reactions from these authorities.

Also included in the leaked trove are details about other members including two administrators, using the names Lapa, and YY and Cortes, an actor associated with the Qakbot Ransomware group. ZoomInfo, which provides data on companies and individuals, also exposed more than 350 unique URLs. The leaked links give insight into how Black Basta members use the service to research companies they target.

Security company Hudson Rock has said that it has already fed the transcripts of chats into ChatGPT in order to create BlackBastaGPT, which is a resource for researchers to analyze Black Basta operations.