Security News > 2023 > June > Royal ransomware gang adds BlackSuit encryptor to their arsenal
The Royal ransomware gang has begun testing a new encryptor called BlackSuit that shares many similarities with the operation's usual encryptor.
Since its launch, Royal Ransomware has become one of the most active operations, responsible for numerous attacks on the enterprise.
Since late April, there have been rumbles that the Royal ransomware operation was getting ready to rebrand under a new name.
A new BlackSuit ransomware operation was discovered in May that used its own branded encryptor and Tor negotiation sites.
As BlackSuit is a self-contained operation, it's possible Royal is planning on launching a subgroup focused on certain types of victims, or it's being saved for a rebrand later.
A rebrand would no longer make sense, as a recent report by Trend Micro has shown clear similarities between the BlackSuit and Royal Ransomware encryptors, making it hard to convince anyone that they are a new ransomware operation.