Ransomware needs a way in. Stolen credentials are the cheapest one.

SWISS ROSE Factory Ransomware Attack

Ransomware victimRansomed

novaGroup

IranCountry

Nov 14, 2025Discovered

Overview

View group profile

Industry

Manufacturing

Country

Iran

Discovered

9 months ago

Attack date

Nov 15, 2025

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

nova

Total victims

140

First seen

Aug 2025

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

Threat level

2.9/10

Aggressiveness5/10

Lethality0.3/10

Criticality3.5/10

Status breakdown

Data Leaked5.7%8

Claimed

this victim

94.3%132

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

Iran

Not a listed target country

Other victims

View all (140)

Same group · nova

SistNet
Italy
Claimed
Centrul de Tehnologii Informaționale în Finanțe
Ukraine
Claimed
Digital Edge
Singapore
Claimed
Công nghệ VNSO
Vietnam
Claimed
Marpatech S.A.C.
Peru
Claimed
9 Digital
Argentina
Claimed

Group activity