Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
nova ransomware
*/
rule nova_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.nova"
description = "Detects nova ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "nova" ascii nocase
$name2 = "NOVA" ascii
$onion = "nova.onion" ascii nocase
condition:
any of them
}
Conversaciones de rescate divulgadas, con fines de estudio defensivo. Contactos, enlaces y wallets redactados.
----------------------------------------------------------------------------- Ransom ----------------------------------------------------------------------------- -> Hello , without any problems , if you see this Readme its mean you under controll by Nova ransomware , Data stolen and will be leaked if didn't contact us in 48 hours - encrypted files have ext .[victim_name]NV DON'T TOUCH IT -> Data from your network will be leaked in 10 days , take action and get in touch please --- make sure that the best way to less the time for you is contacted us to recover and decrypt your secret data and stop leak operation ----------------- >>> what we will provide and help with ? -> we will provide advanced decryptor easy for use and we will return every file or data we delete or stole from your Network -> we will give you link to download data stolen from your network as plus recover -> we provide report to how fix your network , and how we gain access and bypass your security, and some advice to up your security ----------------- >>> contact us here (use tor Browser to access chat): download tor from torproject.org ---------------- Chat system (TOR) join link : [redactado] put any username to join ---------------- - our [redactado] messanger ID (Add ons , please use chat in tor to contact , contact in [redactado] if you can't access chat) : [redactado] ([redactado] - also you can use [redactado] ID : [redactado] ----------------- >>> important notes : -> please do not touch the files becouse we can't decrypt it if you touch it -> please contact us today or soon a possible , becouse the leak operation should start , and we will not decrypt or recover you after time ----------------- - your leak post will be in our Blog : [redactado] ----------------------------------------------------------------------------- Ransom -----------------------------------------------------------------------------
Sistnet, a division of Sistemi Tre s.r.l., offers comprehensive solutions in Information and Communication Technology, focusing on transforming products into services. Their offerings include advanced security solutions like EDR-X antivirus, networking, unified communication, and internet services such as cloud backup and email. They aim to protect small and medium-sized enterprises from cyber threats, emphasizing the importance of cybersecurity. With a commitment to high-quality service and innovative partnerships, Sistnet provides tailored support and monitoring for their clients - Nova Provide tree and samples from stolen data and decrypt sample to the company when its get in touch with support department.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| SistNet | IT | Not Found | — | 25 jul 2026 |
| Center Of Information Technologies In Finance Public Institution | MD | Financial Services | — | 24 jul 2026 |
| Digital Edge | US | Technology | — | 24 jul 2026 |
| VNSO | VN | Technology | — | 22 jul 2026 |
| Marpatech | PE | Technology | — | 22 jul 2026 |
| Canal 9 Litoral | AR | Technology | — | 22 jul 2026 |
| La Financière d'Orion (finorion) | FR | Financial Services | — | 21 jul 2026 |
| Tèrra Aventura | PT | Hospitality | — | 21 jul 2026 |
| Koperasi Karyawan PT Aplikanusa Lintasarta | ID | Technology | — | 21 jul 2026 |
| Jrd logistics | US | Transportation | — | 20 jul 2026 |
| Rumah Sakit Universitas Indonesia (RSUI) | ID | Healthcare | — | 20 jul 2026 |
| Universidad Nacional de Mar del Plata | AR | Education | — | 20 jul 2026 |
| Koplarla | ID | Retail & E-Commerce | — | 20 jul 2026 |
| meralmanisa | TR | Manufacturing | — | 19 jul 2026 |
| Dephub | ID | Government & Defense | — | 19 jul 2026 |
| Jota Joias Premium | BR | Retail & E-Commerce | — | 19 jul 2026 |
| FMZ Tecnologia em Sistemas | BR | Technology | — | 18 jul 2026 |
| Phi | CA | Not Found | — | 17 jul 2026 |
| Digipro | VN | Technology | — | 17 jul 2026 |
| Integrated Marketing Services | US | Business Services | — | 17 jul 2026 |
| Hynet | GB | Technology | — | 10 jul 2026 |
| NSW Rural Fire Service | AU | Public Sector | — | 26 jun 2026 |
| NSW Government (RFS Department) | AU | Public Sector | — | 26 jun 2026 |
| vslmarine | IN | Transportation/Logistics | — | 26 jun 2026 |
| lpgroup | Not Found | — | 24 jun 2026 | |
| alejandria | Not Found | — | 24 jun 2026 | |
| transvill | Transportation/Logistics | — | 24 jun 2026 | |
| transvill.com.pe | PE | Transportation | — | 24 jun 2026 |
| alejandria.biz | AR | Not Found | — | 24 jun 2026 |
| lpgroup.pt | PT | Business Services | — | 24 jun 2026 |
| cloudquantum | CO | Technology | — | 23 jun 2026 |
| FTL-Fast Transit Line | BE | Transportation/Logistics | — | 23 jun 2026 |
| Lockers IT | Technology | — | 21 jun 2026 | |
| Nhà Thành Phố | VN | Not Found | — | 21 jun 2026 |
| Dosab | SA | Manufacturing | — | 20 jun 2026 |
| Hosab | Business Services | — | 20 jun 2026 | |
| MIT HJERTE | DK | Healthcare | — | 20 jun 2026 |
| One Believing Interiors | Consumer Services | — | 20 jun 2026 | |
| Desert Micro | Technology | — | 19 jun 2026 | |
| Sunass | PE | Energy & Utilities | — | 16 jun 2026 |
| Kedah | MY | Not Found | — | 16 jun 2026 |
| NSW Government | AU | Public Sector | — | 15 jun 2026 |
| Divine IT | BD | Technology | — | 15 jun 2026 |
| Sky devices | US | Technology | — | 15 jun 2026 |
| Bandung | ID | Not Found | — | 14 jun 2026 |
| Trevi | IT | Construction | — | 9 jun 2026 |
| Universitas Nasional | ID | Education | — | 6 jun 2026 |
| Aspire hospital | IN | Healthcare | — | 5 jun 2026 |
| Everlite concept | FR | Not Found | — | 2 jun 2026 |
| IBENA Textilwerke | DE | Manufacturing | — | 2 jun 2026 |
| LTI Services and Larick Towing | US | Transportation/Logistics | — | 30 may 2026 |
| BC3 Tecnologia | BR | Technology | — | 30 may 2026 |
| Daegu University AI Department | KR | Education | — | 29 may 2026 |
| Badan Pangan Nasional | ID | Agriculture and Food Production | — | 29 may 2026 |
| SECONT Secretaria de Controle e Transparência | BR | Government & Defense | — | 24 may 2026 |
| Desysweb | PE | Technology | — | 8 may 2026 |
| International Business Solution de México | MX | Professional Services | — | 6 abr 2026 |
| VX Case | BR | Retail & E-Commerce | — | 29 mar 2026 |
| Cisneros group | VE | Retail & E-Commerce | — | 11 ene 2026 |
| Sense Eletronica | BR | Technology | — | 23 dic 2025 |
| Atenção Primária à Saúde Brazil | BR | Healthcare | — | 4 dic 2025 |
| Saude Fortaleza | BR | Healthcare | — | 15 nov 2025 |
| Medidores Industriales y Medicos SA de CV | MX | Manufacturing | — | 15 nov 2025 |
| BRDSoft | BR | Technology | — | 21 oct 2025 |
| Ministerio de Salud de la Nación argentina | AR | Government & Defense | — | 12 oct 2025 |
| SD Soluciones Digitales | MX | Technology | — | 5 oct 2025 |
| LCM Construção e Comércio S/A | BR | Manufacturing | — | 11 jul 2025 |
| Rama judicial colombia | CO | Government & Defense | — | 3 jul 2025 |
| SJERP | DO | Technology | — | 29 abr 2025 |
| Tomio Ingeniería | AR | Manufacturing | — | 28 abr 2025 |
| Ihara | BR | Manufacturing | — | 28 abr 2025 |
| bettininformatica - suporteon | BR | Technology | — | 28 abr 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Centrul de Tehnologii Informaționale în Finanțe (CTIF) offers a wide range of services and products aimed at legal entities such as public authorities, budget institutions, and economic agents, as well as individuals interested in financial information technology. Their services primarily focus on the management, development, and operation of automated information systems in public finance, accounting, taxation, customs, and public procurement. CTIF also provides training courses for professionals in the field of public procurement. The center is committed to transparency and communication with its clients - Data officially taken from Minister Private Information Cloud, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Digital Edge is a Managed Services Provider, skilled and accredited with a proven track record for over 20 years, operating exclusively within prime data center facilities enabling Digital Edges Information Security Management System to deliver Enterprise level IT Services conforming with ISO 27001 Information Technology Security Management System Requirements, certified since May 1, 1996. In addition, the company troubleshoot, consult, prepare the company's clients for NIST CSF 800, ISO 27001, SSAE16/SOC2, PCI DDS compliant frameworks and/or legal regulations such as NYS DFS 500, HIPPA, GDPR, PIPEDA or Californias Data Privacy Act, as well as other frameworks, regulations, or contractual requirements. Cloud Engineering services including design, implementation and support for Dedicated Private and Hybrid Cloud environment, Full spectrum IT Support and Outsourcing, 24/7 NOC and SOC Operation, Security Incident Response Team Operation, Business Continuity and Disaster Recovery. Digital - sensitive reports and clients data in risk, reach us, we left note in encrypted devices - Nova Provide tree and samples from stolen data and decrypt sample to the company when its get in touch with support department.
Công nghệ VNSO is a leading provider of cloud and server solutions in Vietnam, offering a wide range of services including hosting, VPS, cloud storage, private cloud, anti-DDoS, and CDN. Their products cater to various needs, from high-performance cloud servers to dedicated servers for gaming and AI applications. VNSO aims to support businesses of all sizes in their digital transformation journey with reliable and secure technology solutions. The company is committed to customer satisfaction, providing 24/7 technical support and a variety of flexible service options - all clients data taked, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Marpatech specializes in providing instrumentation and control solutions across Latin America, with a focus on the mining and industrial sectors. The company offers a range of products from various manufacturers, including AMETEK, SOR, and JUMO, catering to clients in Peru, Argentina, and Colombia. With offices in major cities, Marpatech is committed to delivering technical and commercial support to its clients. The company actively participates in industry events to showcase its expertise and innovations - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
AHORA Entre Ríos is a news platform that provides the latest updates and urgent news from Entre Ríos, Santa Fe, and the Litoral region. The service covers a wide range of topics including society, politics, sports, economy, and health. It aims to keep its audience informed with minute-by-minute news coverage. The intended clients are residents and individuals interested in current events in the specified regions - MXF secret files at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.