Royal Ransomware Expands to Target Linux, VMware ESXiBy rooter / May 9, 2023 The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.