Dark Basin is a hack-for-hire cyber espionage group that first emerged around 2013, though its widespread operations were publicly exposed by Citizen Lab in June 2020. The group operates out of India, closely linked to the company BellTroX InfoTech Services. Their primary motivation is commercial espionage, conducting targeted information gathering for clients involved in legal, financial, or political disputes. What distinguishes Dark Basin is its extensive and methodical use of custom URL shorteners to facilitate widespread spear-phishing campaigns, alongside a notable pattern of some BellTroX employees brazenly leaving evidence of their activities, such as phishing kit source code and log files, openly accessible online. They have also been tracked under the alias Mercenary.Amanda by NortonLifeLock.

Actores similares

dark-basinactor · 1DarkWebInformeractor · 11DailyDarkWebactor · 11darkangelsransomware · 2darkbitransomware · 2darkleakmarketransomware · 2darkraceransomware · 2darkpowerransomware · 2darkvaultransomware · 2apt-darkcaracalactor · 1