Dark Basin

First seen
2013-01-01 00:00:00
Primary motivation
espionage
Sophistication
expert
Resource level
organization
Actor type
criminal
Profile updated
2026-07-07 11:59:18

Targeted industries: education-and-nonprofits government-and-public-sector financial-services media-and-entertainment technology-and-telecommunications

Context

Dark Basin is a hack-for-hire group that has targeted thousands of individuals and hundreds of institutions on six continents. Targets include advocacy groups and journalists, elected and senior government officials, hedge funds, and multiple industries. Dark Basin extensively targeted American nonprofits, including organisations working on a campaign called #ExxonKnew, which asserted that ExxonMobil hid information about climate change for decades. We also identify Dark Basin as the group behind the phishing of organizations working on net neutrality advocacy, previously reported by the Electronic Frontier Foundation. We link Dark Basin with high confidence to an Indian company, BellTroX InfoTech Services, and related entitie

Reports & references

  • citizenlab.ca — Dark Basin Uncovering A Massive Hack For Hire Operation (report)
  • github.com — 202006 Darkbasin (report)

External references