Skip to content
brandefense.io
Request A Demo
CybercrimeFinancial

NB65

NB65 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets organisations in Russia.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2022
Record updated

Who They Target.

Countries · 1

About NB65.

A hacking group used the Conti's ({{Wizard Spider, Gold Blackburn}}) leaked ransomware source code to create their own ransomware to use in cyberattacks against Russian organizations. While it is common to hear of ransomware attacks targeting companies and encrypting data, we rarely hear about Russian organizations getting attacked similarly. This lack of attacks is due to the general belief by Russian hackers that if they do not attack Russian interests, then the country's law enforcement would turn a blind eye toward attacks on other countries. However, the tables have now turned, with a hacking group known as NB65 now targeting Russian organizations with ransomware attacks.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.