Actors/Cybercrime/Unattributed

UNC4393

CRIME?? · Unattributed

AKA BASTA · Black Basta · Black Basta ransomware

CrowdStrike: SPRITE SPIDERMicrosoft: Storm-1811

Targets23

Sectors18

Threat types1

GIRs mapped0/480

Active since—

Explore in atlas

Also tracked as

3 vendor names · 3 other aliases

Open Rosetta Stone

CrowdStrike

SPRITE SPIDER

Mandiant

UNC4393

Microsoft

Storm-1811

UNATTRIBUTED ALIASESBASTABlack BastaBlack Basta ransomware

Victimology

Geographic footprint · 23 countries

Export STIX

origin · unattributedtargeted countries · 23

EUROPE · 15

Austria · Belgium · Switzerland · Germany · Denmark · Spain · Finland · France · United Kingdom · Ireland · Italy · Liechtenstein · Luxembourg · Netherlands · Sweden

OCEANIA · 2

Australia · New Zealand

AMERICAS · 3

Canada · Jamaica · United States

ASIA · 3

India · Japan · Oman

Sectors targeted

18 of 40

Aerospace58 actors Aviation22 actors Financial Services73 actors Healthcare46 actors Telecom71 actors Retail & Hospitality32 actors NGOs & Dissidents56 actors Manufacturing (man)49 actors Transportation31 actors Logistics21 actors Hospitality32 actors Transport & Logistics6 actors Food and Beverage9 actors Legal & Professional17 actors Consulting / Professional Services34 actors Chemicals20 actors Consumer Goods / Electronics19 actors Agriculture & Food18 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

FIN · Financial Fraud

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR mappings

0 / 480 requirements mapped

Open matrix

No GIRs mapped yet for this actor.

References

No supporting references have been recorded for this profile. Treat uncited claims as unverified.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type