Royal Ransomware Group Builds Its Own Malware Loader

Malware Designed to Load Crypto-Lockers Remains Key Tool for Ransomware Groups
The Royal ransomware group, which spun off from Conti in early 2022, is refining its downloader malware using tactics and techniques that appear to draw directly from other post-Conti groups, as well as working closely with trusted former associates of Conti, REvil and Hive, researchers say.

conti crypto key loader malware own ransomware ransomware group revil royal royal ransomware tactics techniques tool working