RALord Ransomware (15f1d454-b5a4-4100-8b42-a9805ea38231)
RALord refers to a Rust-based ransomware developed by a ransomware operation of the same name. Public threat reporting indicates that the ransomware has also been leveraged by affiliates leveraging Nova ransomware-as-a-service ("RaaS") infrastructure.[Cyble April 17 2025][SonicWall Nova Ransomware April 11 2025]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| RALord Ransomware (15f1d454-b5a4-4100-8b42-a9805ea38231) | Tidal Software | Nova RaaS (0c26f51f-35d8-40e8-9ad0-e5092cb3c04e) | Tidal Groups | 1 |