Skip to content
brandefense.io
Request A Demo
RansomwareUnknown

Nokoyawa

Nokoyawa is a ransomware group, tracked by Brandefense. It targets 6 sectors, including Government and Technology, in 8 countries, including the United States and the United Kingdom.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

Sectors · 6
Countries · 8
Labelsbdef-qf:latest

About Nokoyawa.

Nokoyawa is a double-extortion ransomware group that launched a RaaS program in 2022 (operated by threat actor "farnetwork"), primarily targeting businesses in South America across healthcare, financial services, government, and manufacturing, gaining significant attention in 2023 for exploiting a Windows CLFS zero-day (CVE-).

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.