Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Author(s): Tyler McGraw
Organization: Rapid7

Open article directly Open article on Archive.org

2026-09-04 ⋅ Rapid7 ⋅ Rapid7 Labs
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

2026-06-17 ⋅ Rapid7 ⋅ Anna Širokova
Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain
Unidentified 125 (RAT, Dropping Elephant)

2026-05-13 ⋅ Rapid7 ⋅ Anna Širokova
When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise
ModeloRAT

Propose Change Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware