A newly identified ransomware group called Prinz Eugen is actively targeting organizations using stolen RDP credentials, deploying a Go-based encryptor that prioritizes recently modified files to maximize operational disruption. The group deliberately omits ransom notes, delaying victim detection and extending the window before incident response begins. Standard Bank has been named as a confirmed victim, and the group’s abuse of legitimate remote management tooling makes detection significantly harder without specific behavioral controls in place.