Atlas Actors147 Names471 Sectors40 Requirements480

⌘K

Atlas Actors147 Names471 Sectors40 Requirements480

LOADING

UNC4393 (aka BASTA, Black Basta) · APT Atlas

Actors/Cybercrime/Unattributed

UNC4393

CRIME?? · Unattributed

AKA BASTA · Black Basta · Black Basta ransomware

CrowdStrike: SPRITE SPIDERMicrosoft: Storm-1811

Targets23

Sectors18

Threat types1

GIRs covered0/480

Active since—

QUICK FACTS

TypeCybercrime

OriginUnattributed

First seen—

Type (verbatim)eCrime

GIR coverage0/480

TTPs0

Targets23

Sectors18

Last reviewed2026-07-29

Also tracked as

3 vendor names · 3 other aliases

Open Rosetta Stone

CrowdStrike

SPRITE SPIDER

Mandiant

UNC4393

Microsoft

Storm-1811

UNATTRIBUTED ALIASESBASTABlack BastaBlack Basta ransomware

Victimology

Geographic footprint · 23 countries

origin · unattributedtargeted countries · 23

EUROPE · 15

Austria · Belgium · Switzerland · Germany · Denmark · Spain · Finland · France · United Kingdom · Ireland · Italy · Liechtenstein · Luxembourg · Netherlands · Sweden

OCEANIA · 2

Australia · New Zealand

AMERICAS · 3

Canada · Jamaica · United States

ASIA · 3

India · Japan · Oman

Sectors targeted

18 of 40

Aerospace59 actors Aviation22 actors Financial Services74 actors Healthcare47 actors Telecom72 actors Retail & Hospitality33 actors NGOs & Dissidents56 actors Manufacturing (man)50 actors Transportation31 actors Logistics22 actors Hospitality33 actors Transport & Logistics7 actors Food and Beverage10 actors Legal & Professional18 actors Consulting / Professional Services35 actors Chemicals20 actors Consumer Goods / Electronics20 actors Agriculture & Food18 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

FIN · Financial Fraud

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR coverage

0 / 480 requirements satisfied

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type

FIN10cybercrime

unattributed · 1 targets · since 2013

unattributed · 0 targets · since —

Russia · 15 targets · since 2014

APT73nation-state

unattributed · 0 targets · since —

UNC1543cybercrime

unattributed · 22 targets · since —

unattributed · 1 targets · since —