Royal

Criminal hacking organization

Follow Royal on Notably News to receive short updates to your email — rarely!

2023 The FBI and CISA jointly issued an advisory providing detailed information on Royal ransomware's tactics, techniques, procedures (TTPs), and indicators of compromise (IOCs) to help organizations defend against their attacks.
November 2023 FBI and CISA warn that Royal ransomware gang may rebrand as 'BlackSuit' after testing an encryptor called BlackSuit
December 2022 A tool repository used by Royal ransomware was identified at IP: 94.232.41[.]105, which included Cobalt Strike and other malware tools used for data exfiltration.
December 7 2022 United States Department of Health and Human Services (HHS) issued a warning to healthcare organizations about the threats posed by Royal ransomware, with ransom demands ranging from $250,000 to over $2 million
September 2022 Gained significant attention among cybersecurity researchers after a news site published an article about their targeted attack campaigns using callback phishing techniques
January 2022 Royal cyber gang becomes active, initially known as 'Zeon' before rebranding as 'Royal'

This contents of the box above is based on material from the Wikipedia article Royal (cyber gang), which is released under the Creative Commons Attribution-ShareAlike 4.0 International License.

See Also