This briefing explains a public 2024 advisory. It is not a live incident feed; consult the original source and current vendor guidance for updates.
What the advisory tells us
The updated advisory records the rebrand from Royal to BlackSuit and adds observed tactics and indicators. A name change does not remove the need to examine the behaviors and defenses described in the source.
What teams can do
Review the updated source for indicators and mitigations relevant to your environment. Maintain a practiced recovery plan, strong identity controls and protected backups.
Read the original advisory
FBI IC3 / federal partners: source advisory (PDF) ↗
The linked advisory is an independent government source. It does not endorse CyberWall or its products.