NemtyMalware
Nemty is a ransomware that was discovered in September 2019. Fortinet states that they found it being distributed through similar ways as Sodinokibi and also noted artfifacts they had seen before in Gandcrab.From MISP Galaxy
Last reported 1 month ago, by ESET WeLiveSecurity (ES)3 reports
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
3 reports, newest first · the exact sentence from each-
Panorama de amenazas digitales en México: qué cambió en el primer semestre de 2026“…ó como el único país de la región donde se registraron señales de grupos como DarkSide, Cl0p, Mallox, Nemty, Kasseika y Avaddon, confirmando que las organizaciones locales enfrentan una diversidad de actores dirigidos significativamente superior…”
-
Ransomware manager: Investigation into farnetwork, a threat actor linked to five strains of ransomware“…areer, which began in 2019, farnetwork has been involved in several connected ransomware projects, including JSWORM, Nefilim, Karma, and Nemty, as part of which they helped develop ransomware and manage the RaaS programs before launching their own RaaS program based on Nokoyawa r…”
-
Dusting for fingerprints: ShadowSyndicate, a new RaaS player?“The origins of Nokoyawa can be traced back to another ransomware type called Nemty.”
Indicators in its reports
named in the reports above- exploit[.]inin 1 report
- anbush[.]comin 1 report
- mysqlserver[.]orgin 1 report
- ipulsecloud[.]comin 1 report
- esoftwareupdates[.]comin 1 report
- cmdatabase[.]comin 1 report
- maximumservers[.]netin 1 report
- avdev[.]netin 1 report
- devcloudpro[.]comin 1 report
- uranustechsolution[.]comin 1 report
- qw.sveexec[.]comin 1 report
- situotech[.]comin 1 report
- 1ca4cbac895fc3bd12417b77fc6ed31din 1 report
- 194.165.16[.]64in 1 report
- 46.161.27[.]151in 1 report
- 193.142.30[.]37in 1 report
- 193.142.30[.]205in 1 report
- 81.19.135[.]229in 1 report
- 194.165.16[.]53in 1 report
- 5.188.87[.]47in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.