Royal/BlackSuit Active
Evolution from Royal to BlackSuit ransomware operation.1
Total Victims
2023-05-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
12.9d
Avg Delay
0
Negotiations
ONION URLS
royal2xthig3ou5hd7zsliqagy6yygk2cdelaxtni2fyad6dpmpxedid.onion
royal4ezp7xrbakkus3oofjw6gszrohpodmdnfbe5e4w3og5sm7vb3qd.onion
TOOLS
SharpDPAPI
Mythic
Rclone
7-Zip
FILE EXTENSIONS
.dead
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Blue Healthcare | Germany | Professional Services | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes