Nokoyawa
| RaaS
Nokoyawa is a double-extortion ransomware group that launched a RaaS program in 2022 (operated by threat actor "farnetwork"), primarily targeting businesses in South America across healthcare, financial services, government, and manufacturing, gaining significant attention in 2023 for exploiting a Windows CLFS zero-day (CVE-2023-28252).
Victims
36
First Discovered
2022-12-09
victim
Last Discovered
2023-08-04
victim
Inactive Since
2yrs
more than
Avg Delay
36.3
days
Infostealer
54.3%
victims with domain
Countries
10
hit
Known Locations (4)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
NOKOYAWA Leaks | No | 2026-04-28T07:25:32 |
lirncvjfmdhv6samxvvlohfqx7jklfxoxj7xn3fh7qeabs3taemdsdqd.onion
|
|||
|
NOKOYAWA Leaks | No | 2026-04-28T07:28:07 |
6yofnrq7evqrtz3tzi3dkbrdovtywd35lx3iqbc5dyh367nrdh4jgfyd.onion
|
|||
|
No | 2026-04-28T07:30:34 |
noko65rmtaiqyt2cw2h4jrxe3u56t2k7ov3nd22hoji4c5vnfib2i4yd.onion
|
||||
|
Wall of Shame | No | 2026-04-28T07:32:22 |
nokoleakb76znymx443veg4n6fytx6spck6pc7nkr4dvfuygpub6jsid.onion
|
Target
Top 5 Activity Sectors
- Healthcare 7
- Business Services 5
- Education 5
- Public Sector 3
- Energy 3
Top 5 Countries
-
United States
4
-
Canada
3
-
United Kingdom
2
-
Singapore
1
-
Philippines
1
Heatmap
Ransom Notes (2)
Tools Used
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
AdFind
SoftPerfect NetScan
|
AnyDesk
|
|
|
Cobalt Strike
|
|
PsExec
|
FileZilla
|
YARA Rules (1)
Victims (36)
Studio Domaine is an innovative design firm dedicated to creating personalized interiors for residen…
The Roman Catholic Diocese of Albany covers 14 counties in Eastern New York including the south west…
Pea River Electric Cooperative is a service-oriented, distribution electric utility that is owned by…
Muncy Homes was founded in 1973 in the stable and skilled labor environment of North Central Pennsyl…
The Village Church is an religious institution founded in 1977 and is based in Mound, Texas . The vi…
Since 2003, Modern Eyez has been the leader and preferred provider of quality vision care products a…
ONE HEALTH is a pioneering healthcare platform that is the result of a unique partnership between a …
Tampa General Hospital is a private not-for-profit hospital and one of the most comprehensive medica…
Canaropa, founded in 1954 and headquartered in Quebec, Canada, is a leading provider of quality comm…
For more than 25 years, MSX International has been a dedicated partner to leading automotive brands …
Gaston College is a public community college in Dallas, North Carolina. Serving Gaston County and Li…
Modesto is the county seat and largest city of Stanislaus County, California, United States. With a …
Pueblo Mechanical & Controls is a leading provider of commercial HVAC and plumbing repair, replaceme…
The community of communes of Grand Couronné is a former French community of communes, located in the…
GUARDIAN is the premier fine art storage facility in the Chicago-Milwaukee metropolitan region dedic…
Accurate Auto Insurance was founded in 1992 in Chicago, Illinois. We have a simple approach to doing…
Welcome to Stockmann Natursteine & Fliesen - your natural stone and tiler in Laupheim and the surrou…
Snodland Church of England Primary School is a school that we are all very proud of. Everyone who vi…
Canadian Nurses Association is located in Ontario, Canada and was founded in 1908. Canadian Nurses A…
Rural Workforce Agency Victoria (RWAV) is a not-for-profit government funded organization improving …
Canopy Children’s Solutions (Canopy), formerly Mississippi Children’s Home Services, is Mississippi’…
Wyoming County Community Health System has been serving Wyoming County and the surrounding area for …
In 1988 the Performance Consulting Group was founded by Teresa Hartsaw in Memphis, TN as a marketing…
Hyundai Motors Etats-Unis is a company that operates in the Automotive industry. It employs 251-500 …
Chattanooga State Community College is a public community college in Chattanooga, Tennessee. The col…
Established in 1809, Miami University is consistently ranked among the top 50 national public univer…
Medical University of the Americas (MUA) is a private for-profit offshore medical school in Charlest…
GRS provides personalized management services for its clients across a broad range of business secto…
LiveAction’s Network Intelligence platform transforms complex data into actionable insights, providi…
Nexon is headquartered in Sydney, New South Wales. Nexon Asia Pacific is an end-to-end managed IT pr…