Attackers behind the Blacksuit ransomware have to date attempted to extort $500 million from victims. According to an updated advisory issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the U.S. Federal Investigation Bureau (FBI), Blacksuit ransom demands have ranged from approximately $1 million to $10 million, with the largest individual ransom demand being $60 million.

The advisory confirmed long-held suspicions that Blacksuit is a rebrand of the older Royal ransomware operation, which is operated by the Pygmachus cybercrime group. “BlackSuit shares numerous coding similarities with Royal ransomware and has exhibited improved capabilities,” the advisory said.