Tag: blackbasta affiliates

1 Attack Reports | 0 Vulnerabilities

Attack reports

Takes Aim at the Ransomware Throne

In February 2025, BlackBasta ransomware operations ceased after their internal chat logs were leaked online, leading to disbandment. However, former affiliates continued launching attacks using different ransomware families, including the relatively unknown Payouts King group that emerged in April …
microsoft teams
edr evasion
aes encryption
blackbasta
cactus
quick assist
2026-04-17
blackbasta affiliates
direct system calls
payouts king
rsa encryption
spam bombing
Published: April 17, 2026
Downloadable IOCs: 2
Click here to see more Attack Reports