A huge trove of leaked Black Basta chat logs expose the ransomware gang’s key members and victims

In Malware Ransomware, Data Breach News
February 24, 2025

Once again, it seems an internal – and perhaps politically driven – conflict in a ransomware gang has resulted in the leak of internal chats and information. TechCrunch reports:

A trove of chat logs allegedly belonging to the Black Basta ransomware group has leaked online, exposing key members of the prolific Russia-linked gang. 

The chat logs, which include over 200,000 messages spanning from September 18, 2023, to September 28, 2024, were shared with threat intelligence company Prodaft by a leaker. The cybersecurity firm says the leak comes amid “internal conflict” within the Black Basta group after some members allegedly failed to provide its victims with functional decryption tools despite paying a ransom demand.

It’s not yet known if the leaker, who uses the alias “ExploitWhispers” on Telegram, was a member of the Black Basta gang. 

… According to a post on X by Prodaft, the leaker said that the hackers “crossed the line” by targeting Russian domestic banks.

“So we are dedicated to uncovering the truth and investigating Black Basta’s next steps,” the leaker wrote.

TechCrunch obtained a copy of the hackers’ chat logs from Prodaft, which contain details about key members of the ransomware gang. 

Read more at TechCrunch.