Back to Groups
nova
ACTIVERansomware-as-a-ServiceNova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
1
Total Victims
First Seen
3/14/2026
Last Active
3/14/2026
Known Sites
8
Monthly Victim Timeline
Victims by Country
Victims by Sector
Known File Extensions
..ralordRecent Victims (1)
| Victim | Country | Sector | Discovered | Data Size |
|---|---|---|---|---|
Mid-America Export Experts | US | Not Found | 3/14/2026 | — |