Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

Mar 4, 2025

Threat actors deploying the Black Basta and CACTUS ransomware families have been found to rely on the same BackConnect (BC) module for maintaining persistent control over infected hosts, a sign that affiliates previously associated with Black Basta may have transitioned to CACTUS.
“Once infiltrated, it grants attackers a wide range of remote control capabilities, allowing them to execute

Get Free Report & Network Analysis

Please check your email for the free report.