August 8, 2024 at 10:51AM CISA and the FBI confirmed that the Royal ransomware rebranded to BlackSuit and has demanded over $500 million from victims since it emerged. BlackSuit gang has been active since September 2022 and is linked to attacks against over 350 organizations. They sought ransom payments in Bitcoin, with the largest demand … Read more
June 27, 2024 at 07:06PM The BlackSuit ransomware gang cyberattacked KADOKAWA corporation, demanding ransom in exchange for not publishing stolen data, which includes employee details, financial information, and business plans. The Japanese media conglomerate’s operations, including Niconico services, continue to be impacted. BlackSuit, a rebrand of the Royal ransomware operation, has been linked to numerous … Read more
November 14, 2023 at 09:53AM The FBI and CISA have released guidance on the Royal ransomware operation, suggesting that it may undergo a rebrand. The agencies have observed code overlaps and similarities in intrusion techniques between Royal and BlackSuit ransomware, indicating a potential rebrand or spinoff variant. The advisory provides information on the IOCs and … Read more
November 13, 2023 at 03:43PM The Royal ransomware gang has breached over 350 organizations worldwide since September 2022, demanding over $275 million in ransom. They conduct data exfiltration and extortion before encryption and will leak victim data if the ransom is not paid. The gang may be planning a rebranding initiative and a spinoff variant … Read more