Close Menu
TechBrunchTechBrunch
  • Home
  • AI
  • Apps
  • Crypto
  • Security
  • Startups
  • TechCrunch
  • Venture

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

What's Hot

Sri Mandir keeps investors hooked as digital dedication grows

July 1, 2025

Instagram lets you share Spotify songs with your story to your sound

June 30, 2025

At every stage of TechCrunch, Charles Hudson tells us what investors really see

June 30, 2025
Facebook X (Twitter) Instagram
TechBrunchTechBrunch
  • Home
  • AI

    OpenAI seeks to extend human lifespans with the help of longevity startups

    January 17, 2025

    Farewell to the $200 million woolly mammoth and TikTok

    January 17, 2025

    Nord Security founder launches Nexos.ai to help enterprises move AI projects from pilot to production

    January 17, 2025

    Data proves it remains difficult for startups to raise capital, even though VCs invested $75 billion in the fourth quarter

    January 16, 2025

    Apple suspends AI notification summaries for news after generating false alerts

    January 16, 2025
  • Apps

    Sri Mandir keeps investors hooked as digital dedication grows

    July 1, 2025

    Instagram lets you share Spotify songs with your story to your sound

    June 30, 2025

    The best iPad app to unleash and explore your creativity

    June 30, 2025

    Privacy-centric app maker Proton sues Apple over anti-competitive practices and charges alleged

    June 30, 2025

    Google is adopting AI in classrooms, including new Gemini tools for educators and chatbots for students

    June 30, 2025
  • Crypto

    Vitalik Buterin reserves for Sam Altman's global project

    June 28, 2025

    Calci will close a $185 million round as rival Polymeruk reportedly seeks $200 million

    June 25, 2025

    Stablecoin Evangelist: Katie Haun's Battle of Digital Dollars

    June 22, 2025

    Hackers steal and destroy millions of Iran's biggest crypto exchanges

    June 18, 2025

    Unique, a new social media app

    June 17, 2025
  • Security

    US government overthrows North Korea's major “workers” management

    June 30, 2025

    Mexican drug cartel hackers spy on FBI officials' phones to track and kill informants, the report says

    June 30, 2025

    FBI, cybersecurity firms say prolific hacking crews are currently targeting airlines and transportation sectors

    June 28, 2025

    Prolific cybercrime gangs currently targeting the airline and transportation sector

    June 27, 2025

    US and French authorities confirm arrest of a violation form hacker

    June 26, 2025
  • Startups

    7 days left: Founders and VCs save over $300 on all stage passes

    March 24, 2025

    AI chip startup Furiosaai reportedly rejecting $800 million acquisition offer from Meta

    March 24, 2025

    20 Hottest Open Source Startups of 2024

    March 22, 2025

    Andrill may build a weapons factory in the UK

    March 21, 2025

    Startup Weekly: Wiz bets paid off at M&A Rich Week

    March 21, 2025
  • TechCrunch

    OpenSea takes a long-term view with a focus on UX despite NFT sales remaining low

    February 8, 2024

    AI will save software companies' growth dreams

    February 8, 2024

    B2B and B2C are not about who buys, but how you sell

    February 5, 2024

    It's time for venture capital to break away from fast fashion

    February 3, 2024

    a16z's Chris Dixon believes it's time to focus on blockchain use cases rather than speculation

    February 2, 2024
  • Venture

    At every stage of TechCrunch, Charles Hudson tells us what investors really see

    June 30, 2025

    From $5 to Financial Empowerment: Why Stash co-founder Brandon Krieg is a must-see for TechCrunch All Stage 2025

    June 30, 2025

    A comprehensive list of 2025 tech layoffs

    June 30, 2025

    How to prepare for a second semester salary increase now live in 2025

    June 30, 2025

    Tiffany is lucky to have won a VCS at TC at every stage.

    June 30, 2025
TechBrunchTechBrunch

A huge flock of leaked black buster chat logs reveals key members and victims of ransomware gang

TechBrunchBy TechBrunchFebruary 21, 20254 Mins Read
Facebook Twitter Pinterest Telegram LinkedIn Tumblr WhatsApp Email
Share
Facebook Twitter LinkedIn Pinterest Telegram Email


A large group of chat logs, allegedly belonging to the Black Bustaro Ransomware group, have been leaked online, revealing key members of the prolific gangster associated with Russia.

From September 18, 2023 to September 28, 2024 to September 28, 2024, chat logs containing over 200,000 messages were shared with leaker threat intelligence company Prodaft. The leak is said to have failed to provide victims with functional decryption tools despite some members paying for ransom demand, and the leak is “all about the Black Busta Group” It says that it will come in the midst of an internal conflict.

It is not yet known whether the leaker using “ExploitWhispers” on Telegram was a member of the Black Basta Gang.

Blackbusta is a Russian ransomware gang linked by the US government to hundreds of attacks on critical infrastructure and global businesses, and its publicly known victims have been found to have a US medical institution. includes the Ascension, the British utility company Southern Water, and the British outsing giant Capita. Leaked chat logs give you an unprecedented look among ransomware gangs, including some of the unreported targets.

According to a X post by Prodaft, the leaker said the hackers “crossed the line” by targeting domestic Russian banks.

“So we are dedicated to uncovering the truth and investigating the next steps in Black Busta,” writes Leaker.

Targeted victims, exploits, and teen hackers

TechCrunch has obtained a copy of the hacker's chat log from Prodaft, which contains details about key members of the ransomware gang.

These members include “YY” (the main administrator of Black Busta). “Rapah” (another important leader of Black Busta); “Cortes” (hacker linked to Qakbot Botnet); and “Trump” (also known as “AA” and “GG”).

Hacker “Trump” is believed to be an alias used by Oleg Nefedovaca, whom Product researchers describe as “the group's main boss.” Researchers linked Nefedovaka to the now deprecated Conti Ransomware group. This was closed shortly after internal chat logs were leaked after the gang declared support for Russia's full-scale invasion in Ukraine in 2022.

Leaked Black Basta Chat Logs estimates that one member is 17 years old.

In our count, the leaked chats contain 380 unique links related to company information hosted on Zoominfo, the data broker that collects and sells access to businesses and their employees. Masu. The link also suggests the number of organizations the gang will target over the course of 12 months.

The chat log also reveals unprecedented insights into group operations. The message includes details about the Black Busta victims, copies of phishing templates used in cyber attacks, some of the exploitation used by gangs, cryptocurrency addresses related to ransom payments, ransom demands and hacked. It includes details regarding victim negotiations with the organization.

We also found chat logs of hackers discussing TechCrunch articles about ongoing Qakbot activities despite previous FBI takedown work aimed at knocking the infamous botnet offline. Ta.

TechCrunch also found chat logs that named several previously unknown target organizations. This includes the failed US automotive giant Fisker. Health Tech Provider Cerner Corp. is currently owned by Oracle. HotelPlan is a UK-based travel agency. It is not yet known whether the company has been breached, and neither of them responded to TechCrunch inquiries.

Chatlogs appear to show gang efforts to leverage security bugs in enterprise network devices, such as routers and firewalls that sit at the boundaries of the corporate network and act as digital gatekeepers.

Hackers boast the ability to exploit vulnerabilities in Citrix remote access products to infiltrate networks of at least two companies. The gang also spoke about leveraging vulnerabilities in Ivanti, Palo Alto Networks and Fortinet software to carry out cyberattacks.

Conversations between members of Blackbusta also suggest that some of the group were concerned that they would be investigated by Russian authorities in response to geopolitical pressures. Russia has long been a safe haven for ransomware gangs, but Blackbusta was also concerned about the actions brought on by the US government.

Messages sent after a group's ascension system violation could lead to agencies that warn FBI and CISA are “100% mandatory” to engage, leading to institutions that “take a tough stance on Black Busta” I warned him.

Black Busta's dark web leak site was used to publicly force victims to pay ransom demand for gangs, but at the time of publication it was offline.



Source link

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

US government overthrows North Korea's major “workers” management

June 30, 2025

Mexican drug cartel hackers spy on FBI officials' phones to track and kill informants, the report says

June 30, 2025

FBI, cybersecurity firms say prolific hacking crews are currently targeting airlines and transportation sectors

June 28, 2025

Prolific cybercrime gangs currently targeting the airline and transportation sector

June 27, 2025

US and French authorities confirm arrest of a violation form hacker

June 26, 2025

Homeland Security warns about Iran-backed cyberattacks targeting US networks

June 26, 2025

Leave A Reply Cancel Reply

Top Reviews
Editors Picks

7 days left: Founders and VCs save over $300 on all stage passes

March 24, 2025

AI chip startup Furiosaai reportedly rejecting $800 million acquisition offer from Meta

March 24, 2025

20 Hottest Open Source Startups of 2024

March 22, 2025

Andrill may build a weapons factory in the UK

March 21, 2025
About Us
About Us

Welcome to Tech Brunch, your go-to destination for cutting-edge insights, news, and analysis in the fields of Artificial Intelligence (AI), Cryptocurrency, Technology, and Startups. At Tech Brunch, we are passionate about exploring the latest trends, innovations, and developments shaping the future of these dynamic industries.

Our Picks

Sri Mandir keeps investors hooked as digital dedication grows

July 1, 2025

Instagram lets you share Spotify songs with your story to your sound

June 30, 2025

At every stage of TechCrunch, Charles Hudson tells us what investors really see

June 30, 2025

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

© 2025 TechBrunch. Designed by TechBrunch.
  • Home
  • About Tech Brunch
  • Advertise with Tech Brunch
  • Contact us
  • DMCA Notice
  • Privacy Policy
  • Terms of Use

Type above and press Enter to search. Press Esc to cancel.