Nefilim

Inactive
According to Vitali Kremez and Michael Gillespie, this ransomware shares much code with Nemty 2.5. A difference is removal of the RaaS component, which was switched to email communications for payments. Uses AES-128, which is then protected RSA2048.
15 Victims
May 4, 2020 First Discovered
Sep 9, 2021 Last Discovered
1833 Days Inactive
100% Infostealer
0/1 Sites Online
Top Countries
DE 1
FR 1
NZ 1
AU 1
Top Sectors
Manufacturing 5
Retail & E-Commerce 3
Professional Services 2
Technology 2
Healthcare 1
Agriculture and Food Production 1
Transportation 1
Known Locations (1)
hxt254aygrsziejn.onion
Intelligence
📄 1 Ransom Notes
View the actual ransom notes used by this group →
Victims (15)
Atlanta Allergy & Asthma. Part 1.
Healthcare Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Grimmway Farms. Part 1.
Agriculture and Food Production Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Elliott Group / Cascade Engineering / Unitex Textile Rental Services. Teaser.
Manufacturing Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Seven Seas. Part 1.
Retail & E-Commerce Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
The MADSACK Media Group. Part 1.
Professional Services Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Tegut. Part 1.
Retail & E-Commerce Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
TPG Internet. Part 1.
Technology Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Saipa Press. Part 1.
Manufacturing Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Tegut. Part 2.
Retail & E-Commerce Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
The MADSACK Media Group. Part 2.
Professional Services Discovered: Sep 9, 2021 · Attack est.: Sep 9, 2021
Whirlpool
Manufacturing Discovered: Nov 30, 2020 · Attack est.: Nov 30, 2020
DKA (refrigeration and air conditioning specialist, Dussmann Group subsidiary)
DE Manufacturing Discovered: Jul 26, 2020 · Attack est.: Jul 26, 2020
Orange (mobile operator)
FR Technology Discovered: Jul 3, 2020 · Attack est.: Jul 3, 2020
Fisher and Paykel Appliances
NZ Manufacturing Discovered: May 31, 2020 · Attack est.: May 31, 2020
Toll Group
AU Transportation Discovered: May 4, 2020 · Attack est.: May 4, 2020
Source: Ransomware.live | Data cached and served by Digital Checkmark IT Services | Ransomware Tracker