nova
- First seen
- 2023-02-15 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-05-28 05:25:04
- Profile updated
- 2026-07-07 13:58:57
Targeted industries: financial-services government-and-public-sector
Targeted regions: country_code:us country_code:ru
Context
Nova is a rebranded version of the RALord ransomware, targeting financial and government sectors, predominantly in the United States and Russia. It is designed to encrypt files and demand ransom payments.
Reports & references
- ransomlook.io — Nova (report)
- novarat.sourceforge.net (report)