Threat Group Profile
nova
โ Active โ last 30 days
Victim claims
62
First seen
Apr 2026
Last activity
10 Jul 2026
Tracked since
Apr 2025
Group overview
Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victimsโfiles and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
Preferred targets
Technology ยท 14
Manufacturing ยท 8
Education ยท 6
Transportation/Logistics ยท 5
Business Services ยท 5
Public Sector ยท 4
Most targeted countries
US ยท 6
ID ยท 4
PL ยท 3
PE ยท 3
IT ยท 3
BD ยท 2
