Threat Group Profile
nova
● Active — last 30 days
Victim claims
62
First seen
Apr 2026
Last activity
10 Jul 2026
Tracked since
Apr 2025
Group overview
Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
Preferred targets
Technology · 14
Manufacturing · 8
Education · 6
Transportation/Logistics · 5
Business Services · 5
Public Sector · 4
Most targeted countries
US · 6
ID · 4
PL · 3
PE · 3
IT · 3
BD · 2
