Ransomware Group intelligence
Royal
InactiveTrack Royal with 211 published victims and 2 known leak locations in a single intelligence view.
Overview
Royal is tracked by Breach House as a ransomware group with 211 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | royal2xthig3ou5hd7zsliqagy6yygk2cdelaxtni2fyad6dpmpxedid.onion |
| Leak location 2 | Onion service | Unknown | royal4ezp7xrbakkus3oofjw6gszrohpodmdnfbe5e4w3og5sm7vb3qd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (211)
Search, filter and paginate the victim timeline for Royal. Showing 201–211 of 211.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | https://www.mmemed.com id4509 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.infocision.com id4508 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.wiseyes.net id4507 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.royalimaging.com id4506 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.whitneyoilco.com id4505 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.pandafunds.com id4504 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.veroni.it id4503 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.pressco.com id4502 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.cymax.com id4501 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://fishmans.ca id4500 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://quantumplastics.com id4499 View details | Other | — | ||
|
No additional victim description available. |
|||||