threatintel
actor tracker
IOC pivot
ioc · name

readme.BlackSuit.txt

?? · UnknownBlackSuitconfidence · high

BlackSuit ransom note filename documented in YARA rules and IOC tables of the August 7, 2024 update to AA23-061A. Royal-era victims received README.TXT with the .royal extension; BlackSuit demands have totaled $500M+ with individual asks up to $60M.

family
BlackSuit
first seen
Aug 6, 2024
publisher
CISA
source citation