Article

Internal leaks have revealed that the BlackBasta ransomware group relied on Yalishanda, a Russian bulletproof hosting provider, which hosted around 200 servers for the group. The leaks exposed the identities of key operatives, including Kirill Zatolokin and Aleksandr Volosovik, both sanctioned by the US Treasury. The situation underscores the vulnerabilities of centralized bulletproof hosting and the need for ransomware groups to diversify their infrastructure.