Skip to content
brandefense.io
Request A Demo
RansomwareFinancialAdvanced sophistication · Small team

Redalert

Redalert is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector in the United Kingdom and France.

Also known as
  • N13V
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

Sectors · 1
Countries · 2
Labelsransomware

About Redalert.

RedAlert (also called N13V) is a ransomware group first observed in July 2022 that targets both Windows and Linux VMware ESXi servers, encrypting virtual machine files using the NTRUEncrypt algorithm and accepting only Monero for payment, conducting double-extortion attacks against corporate networks.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.