Royal Ransomware Uses Qbot and Cobalt Strike to Rapidly Compromise Windows Domains

Royal ransomware turned ordinary Windows compromises into enterprise-wide crises by pairing a phishing foothold with fast domain takeover. In incidents reviewed by responders, the operators used Qbot to gain a presence and then expanded their reach before deploying encryption. The result was a disruptive attack that could spread faster than many defenders expected. The campaign […]

The post .