Nova
Nova is a Russia-attributed ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 39 countries, including the United States and the United Kingdom. It uses 25 MITRE ATT&CK techniques.
Also known as
- nova Team
- Ransomware Operators
- Nova affiliate program management
- Origin
- Russia
- Techniques
- 25
- Exploited CVEs
- No CVE data
- First seen
- Apr 28, 2025
- Last seen
- Jul 25, 2026
- Record updated
Who They Target.
Sectors · 16
Countries · 39
About Nova.
Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.