Description
Nokoyawa is a ransomware family that emerged in 2022 and shares infrastructure and tooling with the Hive ransomware operation, according to Kaspersky researchers. It encrypts Windows systems, pressures victims through leak site publication, and its affiliates have used initial access brokers to reach corporate environments.
Stats
- First seen
- March 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Trojan.Ransom.Nokoyawa.1 |
| Trojan.Ransom.Nokoyawa.A |
| Win32.Ransomware.Nokoyawa |
| Win32.Trojan.Nokoyawa |
| Win64.Ransomware.Nokoyawa |
