Ransomware Scheme That Takes New Approach Has Emerged

NEW YORK—A ransomware scheme has emerged that takes a new approach, according to a new report.

“The Royal ransomware group—another offshoot of the disbanded Conti group—appears to have targeted more than 1,000 organizations with a social engineering attack designed to trick victims into trusting the attackers, said researchers at threat intelligence firm Red Sense,” Bank Info Security reported.

The firm last month identified a spam campaign that appears to trace to Royal and that layers on the deception, first by falsely notifying victims that they've been attacked by a ransomware group and then by pressuring them into opening a file that purportedly lists what was stolen but is really a malware loader, Bank Info Security explained.

A Fake Midnight?

The scheme may have even concocted a fake version of a Midnight Group attack, Yelisey Bohuslavskiy, Red Sense's chief research officer, was quoted in the report as saying.

"Victims of this fraud campaign receive emails claiming the Midnight Group was behind the original ransomware attack, and their data will be posted on the dark web if they do not pay," Arete reported, noting that Midnight Group first began operating in 2019.

Feeling the FOMO? We Can Help

The biggest, best and freshest news reporting in credit unions remains free in ’23! Each morning CUToday.info delivers its daily Fresh Today news update offering the latest headlines and breaking news right to your email, with the easy-to-read headlines format allowing you to click on the stories that interest you most in order to learn more.

If you haven’t yet signed up for the new email solution on which CUToday.info has partnered with ResponseGenius, you can do so here. Signing up requires less than one minute of your time—and it’s free!

Please note that after signing up you  may need to go to your Spam/Junk folder and mark the morning headlines email as safe. CUToday.info does not provide its list of readers and emails to outside parties, and we will not be contacting you to sell you an extended warranty or sending you any links so you may cash in on an inheritance you didn’t know was coming.

And did we mention it’s free?

Please note and/or make your IT department or email administrator aware the emails will be coming from the domains CUTodayinfo.com and CUTodayinfoReply.com

 

Section: Standard
Word Count: 489
Copyright Holder: CUToday.info
Copyright Year: 2026
Is Based On:
URL: https://cuto-admin.flux5.ccplatform.net/Fresh-Today/Ransomware-Scheme-That-Takes-New-Approach-Has-Emerged