Skip to content
brandefense.io
Request A Demo
RansomwareFinancialAdvanced sophistication · Organisation

Ralord

Ralord is a ransomware group with a financial motive, tracked by Brandefense. It targets 7 sectors, including Technology and Manufacturing, in 13 countries, including the United States and France.

Also known as
  • Nova RaaS
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Mar 25, 2025
Last seen
Dec 1, 2025
Record updated

Who They Target.

Sectors · 7
Countries · 13

Arsenal · Malware And Tools.

  • RALordmalware

About Ralord.

RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova.".

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.