Do Son BlackSuit, a rebranded Royal/Conti ransomware, unleashes destructive multi-stage attacks. It uses Cobalt Strike, rclone for data exfil, and deletes shadow copies for stealth and speed.
Royal Ransomware
Cybersecurity firm ReliaQuest has published a detailed analysis of a BlackSuit ransomware attack that occurred in April 2024
A hospital representative disclosed that this redirection resulted from a cyberattack, the managing company, Ardent Health Services, confirmed information.