Research from blockchain security company Elliptic and Corvus Insurance tracks payments made to the Black Basta group since its apparent inception in early 2022.