Storm-0829
Storm-0829 is classified as cybercrime.
- Type
- Cybercrime
- Also known as
- 2
Nwgen is a group that focuses on data exfiltration and ransomware activities. They have been found to share techniques with other threat groups such as Karakurt, Lapsus$, and Yanluowang. Nwgen has been observed carrying out attacks and deploying ransomware, encrypting files and demanding a ransom of $150,000 in Monero cryptocurrency for the decryption software.
Also known as: DEV-0829, Nwgen Team
Published reports on this actor:
- https://www.enigmasoftware.com/nwgenransomware-removal/
- https://www.databreaches.net/east-tennessee-childrens-hospital-updates-information-on-ransomware-incident/
- https://readme.security/cybercrime-is-more-of-a-threat-than-nation-state-hackers-6f6cccf47721
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.