Description
Nemty is a ransomware as a service operation that surfaced in 2019 and rented its encryptor to affiliates who handled distribution and negotiation. The malware encrypts victim files with strong cryptography and pressures organizations through data theft and leak site threats. The family's service model, in which developers sell tooling and affiliates supply access, became the standard structure of the modern ransomware economy.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| DeepScan:Generic.Ransom.Nemty.264995D4 |
| Gen:Heur.Ransom.Nemty.B.1 |
| Gen:Variant.Ransom.Nemty.1 |
| Gen:Variant.Ransom.Nemty.14 |
| Gen:Variant.Ransom.Nemty.2 |
| Gen:Variant.Ransom.Nemty.23 |
| Gen:Variant.Ransom.Nemty.7 |
| Gen:Variant.Ransom.Ransomware.Nemty.3 |
| Generic.Ransom.Nemty.091DC376 |
| Generic.Ransom.Nemty.264995D4 |