NexusNet Active
Ransomware group first observed in 2022. Uses PsExec for deployment.1
Total Victims
2022-05-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
40.8d
Avg Delay
0
Negotiations
ONION URLS
hf67h5yapl5dx2yzysbu2koyqqnaotudmc3tylc4php6eswr6uncp5vq.onion
TOOLS
PsExec
BloodHound
Meterpreter
FileZilla
PowerShell Empire
FILE EXTENSIONS
.help
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Delta Holdings | United States | Education | Negotiating |
No TTPs data
No YARA rules
No IoCs
No ransom notes