CyberWallSECURITY

Home / Security journal / Ransomware

Ransomware · Advisory archive

Black Basta: ransomware and data theft together

Federal agencies reported that Black Basta affiliates used a double-extortion model involving both data theft and encryption. Their advisory identified impacts across businesses and critical infrastructure, including health care.

This briefing explains a public 2024 advisory. It is not a live incident feed; consult the original source and current vendor guidance for updates.

What the advisory tells us

The joint advisory describes affiliates using phishing and known vulnerabilities for initial access, then stealing data and encrypting systems. It reported more than 500 affected organizations worldwide as of May 2024; the number should not be treated as current.

What teams can do

Plan for both operational recovery and a possible data exposure. Protect and test backups, patch exposed systems, require strong authentication, and document notification responsibilities before an incident.

Read the original advisory

FBI IC3 / federal partners: source advisory (PDF) ↗

The linked advisory is an independent government source. It does not endorse CyberWall or its products.

Continue reading

Gift card fraud starts with convincing messages

Read next →