H-ISAC TLP White Threat Bulletin: Inside Black Basta: Chat Logs Expose Ransomware Operations

On February 26, 2025, Health-ISAC received information related to insights gathered from leaked chat logs of Black Basta threat actors. These insights include specific vulnerabilities, vendors, products, tools, and targeting approaches for planning attacks. Black Basta is a ransomware-as-a-service (RaaS) operator that emerged in April 2022. Since then, the group has targeted a wide variety of critical infrastructure sectors, including the global health sector. 

View the detailed report below.