Researchers from Proofpoint claim to have observed a brand new threat actor, dubbed "BattleRoyal". This threat actor mounted at least 20 email campaigns in the months between September and November this year, to deliver the DarkGate malware.