Nokoyawa Ransomware
- First seen
- 2022-03-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:43:42
Targeted industries: manufacturing healthcare-and-pharmaceutical financial-services
Context
Nokoyawa Ransomware is a malicious software variant known for encrypting files on infected systems, demanding ransom payments for decryption. It primarily targets sectors such as manufacturing and healthcare, leveraging vulnerabilities to infiltrate networks.
Reports & references
- Microsoft — Re54L7V (report)
- sentinelone.com — Nokoyawa Ransomware New Karma Nemty Variant Wears Thin Disguise (report)
- intrinsec.com — Prospero Proton66 Tracing Uncovering The Links Between Bulletproof Networks (report)
- splintersfury.github.io — Kernelsight (report)
- cert.ssi.gouv.fr — Certfr 2023 Cti 007 (report)
- thedfirreport.com — Html Smuggling Leads To Domain Wide Ransomware (report)
- thedfirreport.com — From Onenote To Ransomnote An Ice Cold Intrusion (report)
- thedfirreport.com — Icedid Macro Ends In Nokoyawa Ransomware (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Nokoyawa (report)
- zscaler.com — Nevada Ransomware Yet Another Nokayawa Variant (report)
- Trend Micro — Nokoyawa Ransomware Possibly Related To Hive (report)
- github.com — Nokoyawa.Yara (report)
- zscaler.com — Nokoyawa Ransomware Rust Or Bust (report)
- malgamy.github.io — Nokoyawa (report)