BlackSuit — Ransomware Profile

BlackSuit emerged mid-2023 as a rebrand of Royal Ransomware, descended from Conti. CISA states the group demanded over $500 million total. Targets critical infrastructure, healthcare, manufacturing, and government. Uses BYOVD technique and phishing callbacks.

Also tracked as

Black Suit, Royal Ransomware, Conti (lineage / successor)

IntelFusions coverage (1)

Tools & malware

Recent claimed victims

Vendor research

Read the full analysis on IntelFusions