nokoyawa Unknown
First seen:
-
0
Total Victims
0
Victims (30d)
Details
Nokoyawa is a double-extortion ransomware group that launched a RaaS program in 2022 (operated by threat actor "farnetwork"), primarily targeting businesses in South America across healthcare, financial services, government, and manufacturing, gaining significant attention in 2023 for exploiting a Windows CLFS zero-day (CVE-2023-28252).
Leak Site
Onion URL:
http://nokoleakb76znymx443veg4n6fytx6spck6pc7nkr4dvfuygpub6jsid.onion
Metadata
Slug:
nokoyawa
Created: 14/01/2026 08:19
Updated: 28/06/2026 16:02