Nefilim
According to Vitali Kremez and Michael Gillespie, this ransomware shares much code with Nemty 2.5. A difference is removal of the RaaS component, which was switched to email communications for payments. Uses AES-128, which is then protected RSA2048.
Victims count: 15
Last discovered victim 2021-09-09
First discovered victims: 2020-05-05
Known Locations
Heatmap
Ransom Notes
Tools Used
No tools used available.
Vulnerabilities Exploited
No vulnerabilities exploited available.
TTPs Matrix
No TTPs available.
Negotiation Chats
No negotiation chats available.
YARA Rules
No YARA rules available.
Victims (15)
Elliott Group / Cascade Engineering / Unitex Textile Rental Services. Teaser.
Nefilim
📅 Discovery Date: 2021-09-09
N/A
DKA (refrigeration and air conditioning specialist, Dussmann Group subsidiary)
Nefilim
📅 Discovery Date: 2020-07-27
N/A
