nefilim Unknown

First seen: -
0
Total Victims
0
Victims (30d)
Details

According to Vitali Kremez and Michael Gillespie, this ransomware shares much code with Nemty 2.5. A difference is removal of the RaaS component, which was switched to email communications for payments. Uses AES-128, which is then protected RSA2048.

Leak Site

Onion URL: http://hxt254aygrsziejn.onion

Metadata

Slug: nefilim

Created: 14/01/2026 08:19

Updated: 07/03/2026 04:00

Back