While conducting some data validation, I observed that the entry for ttdwest on the blackbasta leak site (hxxps://stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd[.]onion/) does not show up in the ransomwatch post data. Other sources indicate this by its name from the post's description, Total Transportation & Distribution, Inc.
Blackbasta's a tough site to review, since it shows a good amount of info about the victim (site, address, description, etc), but does not include the date of the victimization.
Mostly posting this to see whether there's something I'm missing in reviewing the results.
While conducting some data validation, I observed that the entry for ttdwest on the blackbasta leak site (hxxps://stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd[.]onion/) does not show up in the ransomwatch post data. Other sources indicate this by its name from the post's description, Total Transportation & Distribution, Inc.
Blackbasta's a tough site to review, since it shows a good amount of info about the victim (site, address, description, etc), but does not include the date of the victimization.
Mostly posting this to see whether there's something I'm missing in reviewing the results.