In December 2022, criminal forums advertised Nevada ransomware as part of a new ransomware-as-a-service affiliate program. Nevada is programmed in Rust and is compatible with Linux and 64-bit Windows. Zscaler ThreatLabz has found significant similarities in code between Nevada and Nokoyawa ransomware
, such as debug strings, command-line arguments, and encryption algorithms. Nokoyawa ransomware has been modified multiple times since February 2022 and has at least four distinct variants, including Nevada. The Nokoyawa threat group operates two code branches written in different programming languages to avoid detection and confuse researchers.
Nevada Ransomware Signatures
Nevada Ransomware Download