Tag: blackbasta

2 Attack Reports | 0 Vulnerabilities

Attack reports

GhostSocks: From Initial Access to Residential Proxy

GhostSocks is a Malware-as-a-Service (MAAS) that converts compromised devices into residential proxies, enabling threat actors to bypass anti-fraud mechanisms. Introduced in October 2023, it gained popularity after partnering with LummaStealer in February 2024. The malware, coded in Golang, uses ob…

residential proxy

double victimization

Published: October 1, 2025

Downloadable IOCs: 12

Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

A resurgence of activity related to the Black Basta ransomware campaign has been observed since early October. The threat actors have refined their tactics, introducing new malware payloads, improved delivery methods, and enhanced defense evasion techniques. The attacks begin with email bombing of …

Published: December 9, 2024

Downloadable IOCs: 72

Click here to see more Attack Reports