Storm-0829
Aliases: DEV-0829, Nwgen Team
- Primary motivation
- financial-gain
- Sophistication
- expert
- Resource level
- team
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:13:20
Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications retail-and-hospitality
Context
Nwgen is a group that focuses on data exfiltration and ransomware activities. They have been found to share techniques with other threat groups such as Karakurt, Lapsus$, and Yanluowang. Nwgen has been observed carrying out attacks and deploying ransomware, encrypting files and demanding a ransom of $150,000 in Monero cryptocurrency for the decryption software.
Reports & references
- enigmasoftware.com — Nwgenransomware Removal (report)
- databreaches.net — East Tennessee Childrens Hospital Updates Information On Ransomware Incident (report)
- readme.security — Cybercrime Is More Of A Threat Than Nation State Hackers 6F6Cccf47721 (report)
- twitter.com — 1546297609215696897 (report)