Threat actor

Black Basta

2 mentions in 7 days · 3 in 30 days · 3 total · first seen Aug 17, 2026 · last 4d ago

Timeline3 articles

Conti ransomware gang member sentenced to 4 years in prison

US court sentences Ukrainian Conti ransomware member Oleksii Lytvynenko to four years; the gang extorted over $150M from 1,000+ victims.

Ukrainian national Oleksii Oleksiyovych Lytvynenko, 44, was sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022, after being arrested by Irish police in July 2023 and extradited to the US. He pleaded guilty in June 2026 to conspiracy to commit wire fraud, admitting he controlled stolen data from 12 victims and helped develop a loader used in the gang's double extortion attacks. Per the DOJ, Conti attacked more than 1,000 victims across 47 US states and 31 foreign countries, with victim payouts exceeding $150 million as of January 2022. Conti shut down in 2022 and later split into groups including BlackCat, Black Basta, Hive and Quantum.

BleepingComputerupdated Sep 11, 16:07 UTC · 4d agofirst Sep 11, 06:48 UTC · 4d agoPolicy & legal 7 sources1

Conti ransomware crew member sentenced to four years in prison

Ukrainian national Oleksii Lytvynenko sentenced to four years in the US for his role in Conti ransomware attacks on at least 12 companies.

Oleksii Lytvynenko, 44, who pleaded guilty in June to conspiracy to commit wire fraud, was sentenced Thursday to four years in prison by the US Justice Department. He joined the Conti ransomware group in September 2021 as an intruder and malware developer, holding stolen data from 12 victims including eight US-based organizations, and prosecutors said co-conspirators extorted roughly $634,000 in Bitcoin from Tennessee victims including government entities. Conti attacked more than 1,000 organizations before disbanding in 2022, with members rebranding into Zeon, Black Basta, and Quantum/Royal/BlackSuit.

CyberScoopupdated Sep 11, 16:07 UTC · 4d agofirst Sep 10, 20:31 UTC · 5d agoPolicy & legal 7 sources1

Blackbasta Ransomwares Ties Russia

Infosecurity Magazine examines the Black Basta ransomware group's ties to Russia, informing attribution of the cybercrime operation.

The article explores reported ties between the Black Basta ransomware operation and Russian actors, infrastructure, or state-linked context. Such reporting contributes to attribution and helps defenders understand the group's origins and support networks. Details were not available in the provided text.

Infosecurity MagazineAug 17, 00:00 UTC · 29d agoThreat actor

Appears with

organization US Department of Justice 2 threat actor Conti 2 organization FBI 2 threat actor Ryuk 1 threat actor TrickBot 1 threat actor Zeon 1 malware Black Basta 1 malware Cobalt Strike 1 organization An Garda Síochána 1 vendor FBI 1 threat actor BlackCat 1 vendor US Department of Justice 1 threat actor BlackSuit 1 threat actor Royal 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.