Black Basta

A major ransomware and data-extortion operation active from 2022 and associated by Mandiant with UNC4393. It used phishing, social engineering, stolen credentials, edge-device compromise, and access brokers before exfiltrating data and encrypting Windows and Linux/ESXi environments.