Cybercrime
Storm-0829
Also known as DEV-0829, Nwgen Team
0mentions, 7 days
0mentions, 30 days
nonelast mentioned
Nwgen is a group that focuses on data exfiltration and ransomware activities. They have been found to share techniques with other threat groups such as Karakurt, Lapsus$, and Yanluowang. Nwgen has been observed carrying out attacks and deploying ransomware, encrypting files and demanding a ransom of $150,000 in Monero cryptocurrency for the decryption software.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
No posts or advisories have named this actor recently.
References
- https://www.enigmasoftware.com/nwgenransomware-removal/
- https://www.databreaches.net/east-tennessee-childrens-hospital-updates-information-on-ransomware-incident/
- https://readme.security/cybercrime-is-more-of-a-threat-than-nation-state-hackers-6f6cccf47721
- https://twitter.com/cglyer/status/1546297609215696897
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.