Ralord
| RaaS
RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova."
Victims
19
First Discovered
2025-03-26
victim
Last Discovered
2025-04-27
victim
Inactive Since
1yr
more than
Avg Delay
3.9
days
Infostealer
66.7%
victims with domain
Countries
12
hit
Known Locations (4)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
New upgrade for Brand | Yes | 2026-08-04T20:18:04 | nginx |
ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion
|
||
|
New upgrade for Brand | Yes | 2026-08-04T20:16:06 | nginx |
ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion
|
||
|
New upgrade for Brand | Yes | 2026-08-04T20:17:15 | nginx |
ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion
|
||
|
Nova Panel | Login | No | 2026-04-28T07:28:28 |
novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 4
- Agriculture and Food Production 3
- Education 3
- Technology 2
- Retail & E-Commerce 2
Top 5 Countries
-
Brazil
3
-
Spain
3
-
Saudi Arabia
2
-
Argentina
2
-
France
2
Heatmap
Ransom Notes (1)
YARA Rules (2)
Indicators of Compromise (IoCs) (4)
Hash MD5
2
IP Address
1
tox
1
Victims (19)
Diallog Telecommunications is a Canadian-owned and operated telecom company based in Toronto, establ…
The website www.helukabel.de is the official online presence of HELUKABEL GmbH, a German-based globa…
Established in 2008 and headquartered in Riyadh, Rawafid Industrial specializes in water infrastruct…
Agromate.com.my is the official website of Agromate Holdings Sdn Bhd, a leading Malaysian agricultur…
BThe website bettininformatica.com.br belongs to Bettin Soluções em Informática, a technolog…
Bio-Clima Service Srl, an Italian company based in Bernareggio, Lombardy, specializing in th…
Newhotel Cloud is a comprehensive, cloud-based Property Management System (PMS) developed by New…
Established in 1980, the Al-Hejailan Group began as an engineering and contracting firm a…
Hasbco is a company that operates in the Grocery Retail industry. It employs 5to9 people …
Tomio Ingeniería S.A. is an Argentine company specializing in engineering and industrial services.…
The domain ec-nantes.fr is associated with École Centrale de Nantes, which is a prestigious engin…
IHARA is a Brazilian company specializing in the development and manufacturing of agricultural …
Pere Claver Grup is a private, non-profit organization established in 1948 in Barcelona, Spa…
Formosa Chang is a well-known Taiwanese restaurant chain, primarily famous for its tradit…
Pere Claver Grup is a private, non-profit organization established in 1948 in Barcelona, Spa…
IHARA is a Brazilian company specializing in the development and manufacturing of agricultural …
Tomio Ingeniería S.A. is an Argentine company specializing in engineering and industrial services.…
The domain ec-nantes.fr is associated with École Centrale de Nantes, which is a prestigious engin…