Ransomware
Orova
2mentions, 7 days
4mentions, 30 days
17victims posted, 30 days
Nov 3, 2026last mentioned
Orova is a ransomware group that has claimed attacks on various targets, including Yost Home Improvements in the USA and multiple companies in Hong Kong, such as SSI HOLDING LIMITED and Sanrio Hong Kong Co., Ltd. The group has also targeted entities like KINGSSON in Taiwan and Conceptual Designs, Inc. in the USA.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
- MARDEC BerhadNov 2, 2026
- Hydrogel Vision CorporationNov 2, 2026
- Harry's InternationalNov 2, 2026
- Raffles United Holdings Pte LtdNov 2, 2026
- Wah Chan Consolidated Sdn BhdOct 23, 2026
- Trevi TechnologyOct 23, 2026
- Bright Property ServiceOct 14, 2026
- Orient CorporationOct 14, 2026
- City ChainOct 13, 2026
- Durga BearingsOct 13, 2026
- Codar (Pte) LtdOct 13, 2026
- Alfameli GroupOct 13, 2026
- Detronics Pte LtdOct 13, 2026
- The Park Lane Hong KongOct 12, 2026
- Libre Wireless TechnologiesOct 12, 2026
- Amantya TechnologiesOct 12, 2026
- Gatetech TechnologyOct 12, 2026
A leak-site post is the group's claim, not confirmed by the victim.
Recent activity
- 𝗜𝗘 𝗘 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗲𝘀 𝗧𝗮𝗿𝗴𝗲𝘁𝗲𝗱 𝗯𝘆 𝗢𝗿𝗼𝘃𝗮: 𝟮𝟴𝟱 𝗚𝗕 𝗼𝗳 𝗗𝗮𝘁𝗮 𝗦𝘁𝗼𝗹𝗲𝗻, 𝗜𝗻𝗰𝗹𝘂𝗱𝗶𝗻𝗴 𝗗𝗼𝗰𝘂𝗺𝗲𝗻𝘁𝘀 𝗥𝗲𝗹𝗮𝘁𝗲𝗱 𝘁𝗼mastodon · Nov 3, 2026
- 🚨New ransom group blog posts!🚨 Group name: safepay Post title: deom.be Organization: DEOM B.V. Location: 🇧🇪 BE Sector: Manufacturing Info: https:// cti.fyi/mastodon · Nov 2, 2026
- 🚨New ransom group blog post!🚨 Group name: Orova Post title: Trevi Technology Location: 🇹🇼 TW Sector: Technology Info: https:// cti.fyi/#disclosure/Orova/Tremastodon · Oct 23, 2026
- 🚨New ransom group blog post!🚨 Group name: Orova Post title: Wah Chan Consolidated Sdn Bhd Location: 🇲🇾 MY Sector: Other Info: https:// cti.fyi/#disclosure/Omastodon · Oct 23, 2026
References
- https://socradar.io/free-tools/ransomware-intelligence/groups/orova
- https://www.ransomlook.io/group/orova
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.