nblock
nblock is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
source: ransomware.live1 refs →
nblock
nblock is an active ransomware group known for pressuring victims via public leak site exposure.
Analyst brief
nblock is an active ransomware and extortion group. They primarily pressure victims by listing them on their public leak site. Their TTPs include file encryption and data theft, though specific tools are not provided. Defenders should focus on monitoring the leak site for exposures, reinforcing secure backup procedures, and user awareness for phishing threats.
crime
FAQ2
How does the nblock group pressure its victims?
nblock primarily pressures victims by listing them on their public leak site.
What do the TTPs of the nblock ransomware group include?
The TTPs of nblock include file encryption and data theft.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.