Nokoyawa

First seen
2022-02-01 00:00:00
Malware type
ransomware
Family
Malware family
Last IoC activity
2026-07-06 12:56:37
Profile updated
2026-07-07 13:50:18

Targeted industries: financial-services government-and-public-sector healthcare-and-pharmaceutical

Context

Nokoyawa is a ransomware malware family known for targeting various industries and encrypting files for financial gain. It has been linked to multiple cybercrime operations and demands ransoms to decrypt affected data.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Nokoyawa_Auto (yara-rule)

Reports & references

  • ransomlook.io — Nokoyawa (report)

External references