Ayush Juneja

Emerging in April 2024, Bashe (APT73) is a ransomware group that thrives on deception rather than genuine cyber prowess. Unlike traditional ransomware operators, Bashe fabricates attacks by falsely claiming responsibility for high-profile breaches, aiming to attract affiliates and bolster its credibility. Targeting mid-sized businesses across Financial Services, IT, and Banking sectors, the group's tactics involve repurposing old leaks and curating data from public breaches to mislead victims and the media. This report exposes how Bashe manipulates narratives, the potential damage caused by its fraudulent claims, and why businesses must employ advanced threat intelligence to differentiate real threats from cyber theatrics. Stay ahead of cyber deception—learn how to protect your organization from Bashe’s misleading tactics.