RansomwareFinancial

Orova

Orova is a ransomware group with a financial motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 13 countries, including the United States and the United Kingdom.

Request IOC feed Request ATT&CK export

Techniques: 0
Exploited CVEs: No CVE data
First seen: Jul 7, 2026
Last seen: Aug 31, 2026
Record updated: Oct 1, 2026

Who They Target.

Sectors · 14

Government
Technology
Manufacturing
Finance
Transportation and Logistics
Healthcare
Education and Research
Energy and Utilities
Telecommunications
Business Services
Retail and Consumer
Construction and Real Estate
+2 more sectors

Countries · 13

USUnited States
GBUnited Kingdom
INIndia
CACanada
BRBrazil
CNChina
JPJapan
TWTaiwan
MYMalaysia
SGSingapore
HKHong Kong
ZASouth Africa
+1 more countries

About Orova.

First seen 2026-07-07.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.