8base is a new ransomware group that has been active since March 2022. The group has been responsible for a significant number of ransomware attacks, with more than 15% of all ransomware victims in May 2023 attributed to them. 8base has been described as a heavy hitter in the ransomware space and has been responsible for a record number of victims. The group uses encryption paired with “name-and-shame” techniques to compel its victims to pay their ransoms. 8base has an opportunistic pattern of compromise with recent victims spanning across varied industries. The group describes itself as “simple pen testers” and claims to offer companies the most loyal conditions for the return of their data. 8base maintains a darknet website that is only reachable via Tor, a freely available global anonymity network. The site includes the group’s tagline “YOUR DATA IS NOT SAFE” and a page dedicated to victims and its downloads, a set of rules for negotiating, and will only accept a ransom payment in Bitcoin.