Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Zeon

Zeon was the precursor identity used by the group that rebranded as Royal in September 2022, composed primarily of former Conti "Team One" members, deliberately avoiding the RaaS model and keeping its code and infrastructure private.


Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon ZEON.Recovery - Enter the key No 2026-04-28T07:23:49 zeonrefpbompx6rwdqa5hxgtp2cxgfmoymlli3azoanisze33pp3x3yd.onion

Ransom Notes (1)

YARA Rules (1)