Ransomware note
From extortion.wiki, the ransomware notes archive
- Family
- Blackbasta
- Original file
- blackbasta1.txt
- Source snapshot
- 2bbf5b4ecda8
- Archive ID
- note-blackbasta-blackbasta1-txt
A byte-attributed static rendering of the archived source text. Content is escaped, selectable, and inert; extortion.wiki does not execute markup, activate source URLs, submit forms, or load external resources from this document.
Archived note body
Plain text · original whitespace retained
Your data are stolen and encrypted
The data will be published on TOR website if you do not pay the ransom
You can contact us and decrypt one file for free on this TOR site
(you should download and install TOR browser first https://torproject.org)
https://aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion:80/
Your company id for log in: [snip]
Related negotiation records
View all 5 recordsAn explicit alias maps the note family Blackbasta to the Ransomchats actor label BlackBasta. This relationship does not merge either corpus or its statistics.
| Record ID | Indexed date | Messages | Threat actor |
|---|---|---|---|
| 20240814 | Aug 14, 2024 | 50 | BlackBasta |
| 20230501 | May 01, 2023 | 50 | BlackBasta |
| 20230410 | Apr 10, 2023 | 57 | BlackBasta |
| 20221229 | Dec 29, 2022 | 50 | BlackBasta |
| 20221011 | Oct 11, 2022 | 50 | BlackBasta |