A comprehensive threat intelligence analysis of Bashe's leak infrastructure, attack methodology, victimology, extortion tactics, and defensive recommendations. Introduction Over the last decade, the ransomware landscape has evolved drastically. Threat actors have shifted away from relying solely on file encryption, recognizing that resilient backups often neutralize their leverage. Instead, operators now focus heavily on data theft, public exposure, and psychological pressure