FBI and CISA Release #StopRansomware: Royal Ransomware

ronjor · Mar 2, 2023

Release Date March 02, 2023

Royal ransomware attacks have spread across numerous critical infrastructure sectors including, but not limited to, manufacturing, communications, healthcare and public healthcare (HPH), and education.
Click to expand...

CISA encourages network defenders to review the CSA and to apply the included mitigations. See StopRansomware.gov for additional guidance on ransomware protection, detection, and response.
Click to expand...

ronjor · Nov 13, 2023

#StopRansomware: Royal Ransomware

Last Revised November 13, 2023
SUMMARY
Update November 13, 2023
This CSA is being re-released to add new TTPs, IOCs, and information related to Royal Ransomware activity.
Click to expand...

ronjor · Aug 7, 2024

Royal Ransomware Actors Rebrand as “BlackSuit,” FBI and CISA Release Update to Advisory 07 Aug 2024

Release Date August 07, 2024
Today, CISA—in partnership with the Federal Bureau of Investigation (FBI)—released an update to joint Cybersecurity Advisory #StopRansomware: Royal Ransomware, #StopRansomware: BlackSuit (Royal) Ransomware.
Click to expand...

The updated advisory provides network defenders with recent and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) associated with BlackSuit and legacy Royal activity. FBI investigations identified these TTPs and IOCs as recently as July 2024.
Click to expand...

Log in or Sign up

FBI and CISA Release #StopRansomware: Royal Ransomware

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

FBI and CISA Release #StopRansomware: Royal Ransomware

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches