Ralord
| RaaS
RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova."
Victims
19
First Victim
2025-03-22
(est. attack date)
Discovery Date
2025-03-26
Last Seen
2025-04-27
Inactive Since
1yr
more than
Avg Delay
3.9
days
Infostealer
66.7%
victims with domain
Countries
12
hit
Uptime
28.5% avg (30d)
Known Locations (4)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
New upgrade for Brand | No | 2026-09-11T10:04:54 |
ralordqe33mpufkpsr6zkdatktlu3t2uei4ught3sitxgtzfmqmbsuyd.onion
|
||||
|
New upgrade for Brand | No | 2026-09-11T06:07:04 | nginx |
ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion
|
|||
|
New upgrade for Brand | No | 2026-09-11T10:02:22 |
ralordt7gywtkkkkq2suldao6mpibsb7cpjvdfezpzwgltyj2laiuuid.onion
|
||||
|
Nova Panel | Login | No | 2026-08-22T08:19:21 |
novazzitmugtbjwuttc5hhsemkmvwh3iyt27oeeunu5mkw62qpfeykid.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 4
- Agriculture and Food Production 3
- Education 3
- Technology 2
- Retail & E-Commerce 2
Top 5 Countries
-
Brazil
3
-
Spain
3
-
Saudi Arabia
2
-
Argentina
2
-
France
2
Heatmap
Ransom Notes (1)
YARA Rules (2)
Indicators of Compromise (IoCs) (4)
Hash MD5
2
IP Address
1
Tox
1
Victims (19)
Diallog Telecommunications is a Canadian-owned and operated telecom company based in Toronto, establ…
The website www.helukabel.de is the official online presence of HELUKABEL GmbH, a German-based globa…
Established in 2008 and headquartered in Riyadh, Rawafid Industrial specializes in water infrastruct…
Agromate.com.my is the official website of Agromate Holdings Sdn Bhd, a leading Malaysian agricultur…
BThe website bettininformatica.com.br belongs to Bettin Soluções em Informática, a technolog…
Bio-Clima Service Srl, an Italian company based in Bernareggio, Lombardy, specializing in th…
Newhotel Cloud is a comprehensive, cloud-based Property Management System (PMS) developed by New…
Established in 1980, the Al-Hejailan Group began as an engineering and contracting firm a…
Hasbco is a company that operates in the Grocery Retail industry. It employs 5to9 people …
Tomio Ingeniería S.A. is an Argentine company specializing in engineering and industrial services.…
The domain ec-nantes.fr is associated with École Centrale de Nantes, which is a prestigious engin…
IHARA is a Brazilian company specializing in the development and manufacturing of agricultural …
Pere Claver Grup is a private, non-profit organization established in 1948 in Barcelona, Spa…
Formosa Chang is a well-known Taiwanese restaurant chain, primarily famous for its tradit…
Pere Claver Grup is a private, non-profit organization established in 1948 in Barcelona, Spa…
IHARA is a Brazilian company specializing in the development and manufacturing of agricultural …
Tomio Ingeniería S.A. is an Argentine company specializing in engineering and industrial services.…
The domain ec-nantes.fr is associated with École Centrale de Nantes, which is a prestigious engin…