Black Basta Internal Chat Logs Leaked — Reveal Operations and Targets

Wednesday, March 4, 2026 at 11:00 AM UTC·Source: Prodaft / VX-Underground

Updated: Thursday, March 5, 2026 at 08:00 AM UTC

Executive Summary

Leaked internal communications from Black Basta ransomware group reveal operational structure, target selection process, and connections to former Conti members.

Analysis

A cache of internal chat logs from the Black Basta ransomware group has been leaked online, revealing detailed operational insights. The logs confirm connections to former Conti ransomware operators, show systematic target selection based on company revenue and cyber insurance status, and reveal internal disputes over ransom payment handling. The leak includes victim negotiation transcripts and technical details of their tooling.

Source Attribution

Originally published by Prodaft / VX-Underground on Mar 4, 2026. Verified by: Prodaft.

Related Threats

CRITICALRansomware

Cisco fixes critical IMC auth bypass present in many products

Cisco has released patches for a critical vulnerability in its out-of-band management solution, present in many of its servers and appliances. The flaw allows unauthenticated remote attackers to gain admin access to the Cisco Integrated Management Controller (IMC), which gives administrators remote control over servers even when the main OS is shut down. The vulnerability, tracked as CVE-2026-2009

CVE-2026-20093

6h agoCSO Online

MEDIUMVulnerability

Not Toying Around: Hasbro Attack May Take 'Weeks' to Remediate

The company's 8-K filing notes "unauthorized access" and that it's activated business continuity plans and taken some systems offline.

8h agoDark Reading

HIGHRansomware

Akira ransomware group can achieve initial access to data encryption in less than an hour

A new report from Halcyon finds that the group also puts more effort than usual into developing working decryptors, likely to incentivize businesses to pay up. The post Akira ransomware group can achieve initial access to data encryption in less than an hour appeared first on CyberScoop .

12h agoCyberScoop