Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ralord

Inactive for 1+ yr RaaS Successor: nova
World map Statistics
RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova."
Victims
19
none this month
Rank
#176 / 388
all time
First victim
2025-03-22
estimated attack date
Last victim
2025-04-27
567 days ago
Attack → claim
3.9 d
average delay
Countries
12
hit
Infostealer
66.7%
of victims with a domain
Leak-site uptime
19.3% average, 30 days

Victims per month

By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Manufacturing 4 · 21%
  • Agriculture and Food Production 3 · 16%
  • Education 3 · 16%
  • Technology 2 · 11%
  • Retail & E-Commerce 2 · 11%
  • Hospitality 2 · 11%
  • Other 1 · 5%
  • Professional Services 1 · 5%
  • Healthcare 1 · 5%

Top countries

What ransomware.live knows about ralord