This Cybersecurity Advisory (CSA) aims to provide information on Black Basta, a ransomware-as-a-service variant, to help organizations protect themselves. First identified in April 2022, Black Basta has impacted numerous organizations across critical infrastructure sectors globally. Black Basta affiliates exploit common vulnerabilities, such as phishing emails and software flaws, to gain access to victims' systems. They employ a double-extortion tactic by encrypting data and stealing it for future leverage. Victims are given a set timeframe to meet ransom demands, typically communicated through a .onion URL, or risk their data being published on the "Basta News" Tor site. Black Basta actors target healthcare organizations because of their critical nature and potential access to sensitive personal data. Organizations are strongly encouraged to review and implement the provided mitigation recommendations to bolster their defenses against Black Basta and similar ransomware threats. The advisory details Black Basta's tactics and techniques, mapping them to the MITRE ATT&CK framework for comprehensive understanding. It outlines their methods of initial access, privilege escalation, defense evasion, execution, and the tools used in each step. Furthermore, the CSA provides a list of indicators of compromise (IOCs), including file hashes associated with Black Basta, aiding organizations in detecting potential infections. Victims of Black Basta ransomware attacks are advised to report the incident to the FBI or CISA for assistance and support.