#StopRansomware: Black Basta

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency, Department of Health and Human Services , and Multi-State Information Sharing and Analysis Center are releasing this joint Cybersecurity Advisory (CSA) to provide information on Black Basta, a ransomware variant whose actors have encrypted and stolen data from at least 12 out of 16 critical infrastructure sectors, including the Healthcare and Public Health Sector.

This joint CSA provides tactics, techniques, procedures and indicators of compromise obtained from FBI investigations and third-party reporting. Black Basta is considered a ransomware-as-a-service variant and was first identified in April 2022.