A Royal Analysis of Royal Ransom
Emerging in early 2022 as a private group which used multiple strains of ransomware, Royal Ransom has used their own ransomware since September 2022. A recap by Bleeping Computer contains the history of this gang. Recently, the FBI and CISA published a joint advisory, highlighting the impact of Royal Ransom. This blog will dive deep into the inner workings of Royal Ransom’s Windows and Linux executables, after which an anonymized Royal Ransom incident response case is discussed. Malware: Royal [View Article](https://www.trellix.com/en-au/about/newsroom/stories/research/a-royal-analysis-of-royal-ransom.html)