Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Nefilim

Inactive for 5+ yr
World map Statistics
According to Vitali Kremez and Michael Gillespie, this ransomware shares much code with Nemty 2.5. A difference is removal of the RaaS component, which was switched to email communications for payments. Uses AES-128, which is then protected RSA2048.
Victims
15
none this month
Rank
#201 / 388
all time
First victim
2020-05-05
estimated attack date
Last victim
2021-09-09
1893 days ago
Attack → claim
—
average delay
Countries
4
hit
Infostealer
100.0%
of victims with a domain

Victims per month

By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Manufacturing 5 · 33%
  • Retail & E-Commerce 3 · 20%
  • Professional Services 2 · 13%
  • Technology 2 · 13%
  • Healthcare 1 · 7%
  • Agriculture and Food Production 1 · 7%
  • Transportation 1 · 7%

Top countries

What ransomware.live knows about nefilim