Nitrogen is a financially motivated cybercriminal group that emerged in 2023 as an initial access broker and malware developer, evolving by mid-2024 into a full double-extortion ransomware operation. The group's primary distinguishing characteristic is its adept use of malvertising and trojanized installers for initial access, often targeting IT professionals and technical users. While the group's exact origin is not fully documented, its infrastructure is primarily linked to Eastern Europe. Nitrogen also demonstrates a notable operational tactic by implementing countermeasures in ransom negotiations, specifically blocking IP addresses associated with previously failed attempts to undermine victim response strategies.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker