N0n · Ransomware · RaqibCTI

Knowledge/Actors/N0nCorpus

+ Request intel workspace

ransomware

N0n

Provisional

Ransomware

Motivation

—

Attribution confidence

Provisional — not yet assessed

Provisional profile auto-created from leak-site claims — not analyst-vetted. A group's self-claim of a victim, not a confirmed breach.

Why it mattersRansomware actor, unrated confidence.

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

No open hunts or recent alerts tracked against this actor right now.

Associated with

Targets

Company #70targetLeak-site claim · ransomware.live2026-10-15
Asyaport (container terminal operations)targetLeak-site claim · ransomware.live2026-10-12
NEOM Ports (industrial port operations)targetLeak-site claim · ransomware.live2026-10-12
Eurogate Tanger (container terminal operations)targetLeak-site claim · ransomware.live2026-10-12
GCS Kuwait (port community system operations)targetLeak-site claim · ransomware.live2026-10-12
AstraZeneca TürkiyetargetLeak-site claim · ransomware.live2026-09-18
PayPal support operations (Transcom WorldWide)targetLeak-site claim · ransomfeed2026-09-18

Open N0n in: Relationships → · Ask →

Overview Attribution¹ TTPs Indicators Reporting Coverage

Reporting

No third-party reporting yet

No archived reports, OSINT mentions, or sources are linked to this actor yet.

Useful?

Related

Semantically related in the corpus — a discovery aid, not asserted attribution.

Actorpayload
Actorapt73
Actorkrybit
ActorDoommageddon
Actornightspire
ActorGunra