DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Nokoyawa

Nokoyawa

Inactive

nokoyawa

First seen: 2022-12-09T23:16:12.242301+00:00Total victims: 36

Nokoyawa is a double-extortion ransomware group that launched a RaaS program in 2022 (operated by threat actor "farnetwork"), primarily targeting businesses in South America across healthcare, financial services, government, and manufacturing, gaining significant attention in 2023 for exploiting a Windows CLFS zero-day (CVE-2023-28252).

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

Recent Victimsshowing 36 of 36

NameCountrySectorDate
Studio Domaine LLC—Business Services2023-08-04T11:02:13.553376+00:00
Roman Catholic Diocese of Albany—Public Sector2023-08-03T16:05:35.096784+00:00
Pea River Electric Cooperative—Energy2023-08-01T12:50:40.578983+00:00
Muncy Homes—Construction2023-07-29T19:25:07.256801+00:00
AT&SSGEnergy2023-07-29T19:24:41.631571+00:00
Village Church of Barrington—Consumer Services2023-07-29T19:24:14.915438+00:00
Modern Eyez—Consumer Services2023-07-29T19:23:49.519061+00:00
One Health Solutions—Healthcare2023-07-29T19:23:22.127058+00:00
Tampa General Hospital—Healthcare2023-07-20T17:15:20.199670+00:00
CANAROPA IncCAManufacturing2023-07-20T17:14:50.691076+00:00
Roadies—Transportation/Logistics2023-05-29T09:52:39.470391+00:00
CONEX—Business Services2023-05-23T16:09:34.507129+00:00
MiescorPHEnergy2023-05-23T16:09:11.443255+00:00
MSX International—Manufacturing2023-05-23T16:08:48.105883+00:00
Gaston CollegeUSEducation2023-05-23T16:08:24.447284+00:00
City of ModestoUSPublic Sector2023-05-23T16:08:01.182283+00:00
Pueblo Mechanical & Controls—Business Services2023-05-23T16:07:37.817377+00:00
comcom-sgcFRPublic Sector2023-05-23T16:07:14.319528+00:00
Guardian Fine Art Services—Consumer Services2023-05-23T16:06:49.279309+00:00
Accurate Auto Insurance—Financial Services2023-05-23T16:06:40.867650+00:00
Stockmann Natursteine & FliesenDEConstruction2023-05-23T16:06:17.551087+00:00
Snodland C of E Primary SchoolGBEducation2023-05-23T16:05:53.312819+00:00
SabinBRHealthcare2023-05-23T16:05:29.432584+00:00
Canadian Nurses AssociationCAHealthcare2023-05-23T16:05:05.902573+00:00
Rural Workforce AgencyAUHealthcare2023-05-23T16:04:42.368192+00:00
FrescaGBAgriculture and Food Production2023-05-23T16:04:19.036745+00:00
Canopy Children's Solutions—Healthcare2023-05-23T16:03:55.416242+00:00
Wyoming County Community Health System—Healthcare2023-05-23T16:03:31.975006+00:00
ePerformax—Business Services2023-05-23T16:03:07.796000+00:00
Hyundai Motors Etats-UnisMAManufacturing2023-05-23T16:02:44.061932+00:00
Chattanooga State CommunityUSEducation2023-05-23T16:02:20.420857+00:00
Miami UniversityUSEducation2023-05-23T16:01:57.074350+00:00
Medical University of the AmericasCAEducation2023-05-23T16:01:33.641285+00:00
Global Remote Services—Business Services2023-05-23T16:01:10.175940+00:00
Liveaction inc.—Technology2023-05-23T16:00:50.247013+00:00
Nexon Asia Pacific—Technology2022-12-09T23:16:12.242301+00:00

Data from ransomware.live