---
title: There’s a new scary ransomware group on the block
description: There's a new scary ransomware group on the block and they are targeting businesses across the globe.
canonical_url: https://codekeeper.co/articles/alert-new-dangerous-ransomware-group
---

[Market trends and insights](https://codekeeper.co/articles/tag/market-trends-and-insights) | [Software resilience](https://codekeeper.co/articles/tag/software-resilience)

# There’s a new scary ransomware group on the block

There's a new scary ransomware group on the block and they are targeting businesses across the globe.

![Placeholder image](https://codekeeper.co/hubfs/Codekeeper%202025/Blogs/author%20-%20placeholder.svg)

By [Jo Rust](https://codekeeper.co/articles/author/jo-rust) Last updated: Jul 24, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

Subscribe Here!

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Ransomware attacks have become a significant threat to businesses worldwide, as cybercriminals continue to exploit vulnerabilities in organizations' digital infrastructures. A recent report by NordLocker has unveiled the tactics and strategies of a prolific ransomware group dubbed the "Royal Ransomware Group”, a group that has launched 26 attacks in March alone. The Royal Ransomware Group: Key Findings **Targeted Attacks:** The group focuses on targeted attacks against businesses, rather than mass-distributed ransomware campaigns. This approach allows them to concentrate on high-value targets and maximize potential profits. **Strategic Use of Social Engineering:** The group relies on social engineering techniques, such as phishing emails, to gain initial access to their target's network. This involves tricking employees into revealing sensitive information or clicking on malicious links. **Encrypting Files and Demanding Ransom:** Once the group gains access to a target's network, they deploy ransomware to encrypt files, rendering them inaccessible. They then demand a ransom in exchange for the decryption key, often in the form of cryptocurrency. **Threatening Data Exposure:** The Royal Ransomware Group adds an extra layer of pressure by threatening to publicly expose the victim's sensitive data if the ransom is not paid, increasing the likelihood of payment. ![POST 10 - Codekeeper_blog_week 13_br-3](https://codekeeper.co/hubfs/_sized/POST%2010%20-%20Codekeeper_blog_week%2013_br-3-1654x570.png)
Protecting Your Business from Ransomware Attacks To safeguard your business from ransomware attacks, consider implementing the following best practices: **Employee Training:** Educate employees about ransomware threats and the risks associated with clicking on suspicious links or downloading unknown attachments. Regular training sessions can help build a security-conscious workforce and minimize the chances of successful social engineering attacks. **Regular Backups:** Schedule routine backups of critical business data, ensuring that the backups are stored securely, both on-site and off-site. This will enable your business to recover quickly in the event of a ransomware attack without having to pay the ransom. **Update and Patch:** Keep your software, operating systems, and applications up to date with the latest security patches. Cybercriminals often exploit known vulnerabilities in outdated software to gain unauthorized access to networks. **Implement Strong Security Measures:** Employ robust security measures, such as firewalls, antivirus software, intrusion detection systems, and email filtering solutions, to protect your network from potential ransomware attacks. **Develop a Ransomware Response Plan:** Create a detailed ransomware response plan that outlines the steps to be taken in the event of an attack. This plan should include procedures for isolating affected systems, notifying relevant parties, and initiating data recovery efforts. And finally, investing in software escrow can help mitigate the risk of being infiltrated by a ransomware group such as Royal. More and more of these groups are starting to target businesses at scale. Investing in software escrow as an added security measure helps ensure you are able recover your systems in the event of an attack and guarantee continuity. It’s like any form of insurance: it’s better to have it and not need it than need it and not have it. [Book a demo call](https://codekeeper.co/book-a-demo) with one of our experts who will be happy to walk you through our escrow services and solutions to help protect your business continuity in the event of a data breach.

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Farticles%2Falert-new-dangerous-ransomware-group%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Market trends and insights Don't make it easy for them: The four software risks you need to cover Oct 1, 2026](https://codekeeper.co/articles/dont-make-it-easy-for-them-the-four-software-risks-you-need-to-cover)

[Market trends and insights The State of Software Resilience 2026 Sep 30, 2026](https://codekeeper.co/articles/state-of-software-resilience-2026)

[Market trends and insights What the Fable 5 shutdown teaches every business that runs on AI Jul 6, 2026](https://codekeeper.co/articles/what-the-fable-5-shutdown-teaches-every-business-that-runs-on-ai)

[Market trends and insights What is a software bill of materials? A guide for software buyers Jul 13, 2026](https://codekeeper.co/articles/what-is-a-software-bill-of-materials-a-guide-for-software-buyers)