ralord Ransomware
Tracked since Mar 26, 2025
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova."
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live