Ransomware Group intelligence
Nova
ActiveTrack Nova with 221 published victims and 9 known leak locations in a single intelligence view.
Overview
Nova is tracked by Breach House as a ransomware group with 221 published victims.
United States is currently the most targeted country in this dataset.
9 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (9)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | novavdivko2zvtrvtllnq45lxhba2rfzp76qigb4nrliklem5au7czqd.onion |
| Leak location 2 | Onion service | Unknown | leak7y2247fj7dbb35rpfyxuyaqtwbshiwxp6h35ttzlhrxmhvi4fead.onion |
| Leak location 3 | Onion service | Unknown | novaoddh3vxylxqpsfdjprliknbzgbkv6nkazpzu3cvykrgpyzuywryd.onion |
| Leak location 4 | Onion service | Unknown | novatd4577pzlvdyy42slydhrhru7fpcflbbxlajcmbfrgzyeis6d3id.onion |
| Leak location 5 | Onion service | Unknown | novaxtychr6ohlc4zr5its73p6i7unpuhpwoodtzrg2y4w4seytatlid.onion |
| Leak location 6 | Onion service | Unknown | pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion |
| Leak location 7 | Onion service | Unknown | novag4k2te3mstt2xq5irywlpaw6edgkpiwgg4t2q7eecisj2qqtvbid.onion |
| Leak location 8 | Onion service | Unknown | novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion |
| Leak location 9 | Onion service | Unknown | novav75eqkjoxct7xuhhwnjw5uaaxvznhtbykq6zal5x7tfevxzjyqyd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (221)
Search, filter and paginate the victim timeline for Nova. Showing 201–221 of 221.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | SunMoon university id20298 View details | Korea, Republic of | Education | ||
|
The website sunmoon.ac.kr is the official online portal of Sun Moon University (SMU), a private, non-profit institution located in Asan... |
|||||
| Ransomware | educo id20278 View details | Spain | NGOs / Associations | ||
|
Educo El Salvador, the Salvadoran branch of Educo, an international non-governmental organization (NGO) dedicated to... |
|||||
| Ransomware | VS One Technology id20263 View details | Sri Lanka | IT | ||
|
VS One is a technology solutions provider based in Sri Lanka, established in 2019. The company specializes in distributing... |
|||||
| Ransomware | Municipality of Pisa id19960 View details | Italy | Public Sector | ||
|
The website comune.pisa.it is the official portal of the Municipality of Pisa, Italy. It serves as the primary online resource for residents, busine... |
|||||
| Ransomware | novaevo+ / T.consulT id19937 View details | Italy | IT | ||
|
"Novaevo" refers to a specialized software solution developed by T.consulT, an Italian company, designed to manage the lifecycle of technical documentation in industrial sectors, particularly aerospace and defense. The software ensures... |
|||||
| Ransomware | SJERP id19627 View details | Dominican Republic | Communication / Marketing | ||
|
The website sj.com.do is the official platform for SJ ERP, a comprehensive Enterprise Resource Planning (ERP) software developed by JoS... |
|||||
| Ransomware | rawafid id19620 View details | Saudi Arabia | Manufacturing / Engineering | ||
|
Established in 2008 and headquartered in Riyadh, Rawafid Industrial specializes in water infrastructure projects, including seawater and brackish water desalination, wastewater treatment... |
|||||
| Ransomware | Élan Sportif Nantes id19618 View details | France | Communication / Marketing | ||
|
this Victim has been unlisted and operation leak has been stoped , we stop attacks on schools non-profit companys from 1 April , please contact our department to receive decryptor ... |
|||||
| Ransomware | Tomio Ingeniería id19617 View details | Argentina | Other | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | Ihara id19616 View details | Brazil | Other | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | Pere Claver grup id19615 View details | Spain | Other | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | Formosa Chang id19614 View details | Taiwan, Province of China | Other | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | hasbco Company id19613 View details | United States | Services | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | Al-Hejailan Group id19612 View details | Saudi Arabia | Services | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | NewHotel cloud id19611 View details | Portugal | IT | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | ARRCO LSM id19610 View details | Norway | Other | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | Bio-Clima Service id19609 View details | Italy | Other | ||
|
Data has been leaked shame on you and all who work with you |
|||||
| Ransomware | bettininformatica - suporteon id19608 View details | Brazil | IT | ||
|
BThe website bettininformatica.com.br belongs to Bettin Soluções em Informática, a technology company based in Marília, São Paulo, Brazil. They offer services such as computer maintenance... |
|||||
| Ransomware | agromate id19607 View details | Malaysia | Agriculture / Food | ||
|
Agromate.com.my is the official website of Agromate Holdings Sdn Bhd, a leading Malaysian agricultural company specializing in fertilizer... |
|||||
| Ransomware | HELUKABEL id19605 View details | Germany | Manufacturing / Engineering | ||
|
The website www.helukabel.de is the official online presence of HELUKABEL GmbH, a German-based global leader in the manufacturing ... |
|||||
| Ransomware | DIALLOG id19604 View details | Canada | Telecommunications | ||
|
Diallog Telecommunications is a Canadian-owned and operated telecom company based in Toronto, established in 1998. Originally founded as ... |
|||||