ralord
Activity analysis
HackerFeeds has tracked 19 victims claimed by ralord since March 2025, most recently in April 2025 — ranking #174 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in April 2025. Its most-targeted sector is Manufacturing (4 victims), followed by Education (3). Spain accounts for 3 victims (16% of those with a known location).
Victims per year
- 202519
Top sectors
- Manufacturing4
- Education3
- Agriculture and Food Production3
- Hospitality and Tourism2
- Consumer Services2
- Telecommunication1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova."
Recent victims
No victims tracked yet.