infostealer
The "mass" sample arrived as an AES-encrypted ZIP. What it turned out to be: a decoy Romanian engineering app, a fake Chinese security
notes
1. Executive summary
On 25 July 2026, the ransomware actor "nova" publicly claimed a compromise of SistNet (sistnet.it), a division of Sistemi Tre
notes
1. Executive summary
On 21 July 2026, the ransomware actor "nova" publicly claimed a data-theft attack against La Financière d'Orion (finorion)
notes
1. Executive summary
On 2026-07-10, the ransomware actor "nova" publicly claimed a victim named Hynet, a UK-based provider of data storage