Royal Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
May 5, 2026
Last Seen
July 15, 2026

Royal is a ransomware_group tracked across 2 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed May 5, 2026; most recent activity July 15, 2026.

Overview

Please provide the articles about the 'Royal' ransomware group so I can generate a concise 2–3 sentence overview based on those sources.

Related Threat Clusters

Recent Intelligence Reports

  • The EU sanctions "the most active ransomware operator in history" Stern, involved in over ... — Chaincatcher · July 15, 2026
  • “Stern” Ransomware Operator Sanctioned by EU — Chainalysis · July 14, 2026
  • Latvian national sentenced for ransomware attacks run by former Conti leaders — Cyberscoop · May 5, 2026
  • Latvian Cybercriminal Jailed for Role in Multi — Thecyberexpress · May 5, 2026
  • Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison — Bleepingcomputer · May 5, 2026

CVSS v3.1 Breakdown