RA Group, also known as RA World, first surfaced in April 2023, utilizing a custom variant of the Babuk ransomware.