A Russian actor leaked internal chat logs of Black Basta Ransomware-as-a-Service (RaaS) members, revealing their operational tactics from September 2023 to September 2024. Established in 2022, Black Basta employs sophisticated double extortion tactics, targeting high-value sectors. The logs expose their use of the BRUTED framework for credential stuffing attacks on various VPNs and remote-access solutions, enhancing their cybercrime efforts.

DeepSeek-R1 Can Almost Generate Malware
Researchers have used the Chinese artificial intelligence (AI) reasoning model DeepSeek-R1 to help develop keylogging and ransomware with evasion capabilities. While the AI model can