Royal Ransomware Uses Callback Phishing To Carry Out Attacks
The group behind the Royal ransomware family was discovered targeting entities across multiple countries with most infections occurring in the United States, Brazil, and Mexico.
Phishing emails along with social engineering were used to convince victims to install remote access software allowing the threat actor to gain control of the system.
Various malware and open-source tools were used during the attacks including QakBot, Cobalt Strike, PCHunter, PowerTool, GMER, and Process Hacker.
Featured Resources
View More Resources
Control Validation and Optimization
Continuously validate and optimize security controls to improve prevention, detection and response effectiveness.
Cymulate Joins Anthropic Cyber Verification Program
Cymulate has joined the Anthropic Cyber Verification Program, giving Cymulate Research Labs access to advanced AI capabilities for defensive cybersecurity research. This strengthens
The Pipe That Trusted Everyone
Ilan Kalendarov, Security Research Team LeadBen Zamir, Security ResearcherElad Beber, Security Researcher How a single misconfigured named pipe let an