The Egregor Ransomware

Egregor is a Ransomware-as-a-Service campaign (linked to Sekhmet/Maze) actively used in Big Game Hunting: operators steal and exfiltrate sensitive data (via RClone), encrypt systems (ChaCha + RSA-2048), and threaten public disclosure on dedicated sites; distribution and escalation commonly involve phishing, Qakbot/Ursnif/IcedID, RDP abuse, and Cobalt Strike-based lateral movement, with observed high ransom demands and numerous victims.