Black Basta Ransomware Campaign Targets Health Sector with Double-Extortion Tactics
Black Basta Alert: Access via phishing, ZeroLogon, & CVE-2024-1709 (ConnectWise). Valid credentials (T1078) abused for lateral moves. Escalating in 2025. Secure now.
Access expert issued cyber advisories, vulnerability reports, and actionable insights before they turn into real incidents.
Explore critical advisories and security reports to identify risks early and act before attackers do.
Black Basta Alert: Access via phishing, ZeroLogon, & CVE-2024-1709 (ConnectWise). Valid credentials (T1078) abused for lateral moves. Escalating in 2025. Secure now.
Play ransomware has rapidly grown since mid-2022, becoming a major RaaS threat, with nearly 900 victims reported by the FBI by May 2025 globally.
These threats use advanced evasion techniques, including RC4/RC5 encryption, multi-threading, UDP beaconing, and WSL abuse for covert command execution.

