EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Threat actor database
Threat actor profile

N0n

Defensive profile aggregated solely from the catalogued evidence. Associations reflect the sources and are not independent EudorIA attribution.

Evidence status
observed
First observation
Not available
Last observation
25/09/2026
Correlated signals
17
Observed picture

What the sources describe

Indice OSINT pubblico: TapClicks (marketing analytics platform) viene associata al gruppo N0n. La segnalazione non e stata verificata da EudorIA e non equivale alla conferma di un incidente.

Indice OSINT pubblico: AFRICA-TECH (IT services / document processing) viene associata al gruppo N0n. La segnalazione non e stata verificata da EudorIA e non equivale alla conferma di un incidente.

Indice OSINT pubblico: FinSoft (Kolibri retail back-office software) viene associata al gruppo N0n. La segnalazione non e stata verificata da EudorIA e non equivale alla conferma di un incidente.

AliasesNot catalogued
RansomwareNot documented
MalwareNot documented
Named targetsUS, ML, UZ, VE, SE, AR, TR, LU, BR, VN
Modus operandi

Observed methods and techniques

0 structured pieces of evidence
Profile to enrich

The available sources do not yet describe sufficiently structured methods.

Risk reduction

How to prepare the defence

Controls linked to the evidence

The sources contain no explicit defensive guidance. The services below are deterministically correlated to the catalogued TTPs, not generated as claims about the actor.

EudorIA

Security Assessment

Verifica esposizione, configurazioni e priorita di remediation prima che una tecnica osservata diventi un incidente.

Approfondisci il servizio →
EudorIA

SOC as a Service

Monitora le evidenze, correla gli indicatori e coordina triage, escalation e risposta agli incidenti.

Approfondisci il servizio →

The measures listed reduce likelihood and impact but do not guarantee the absolute prevention of an attack.

Tor intelligence

Catalogued onion sources

0

No onion source associated with this group.

Evidence trail

Linked observations

Last 17
DateSignalTypeConfidence
25/09/2026Segnalazione ransomware: TapClicks (marketing analytics platform)ransomwareunverified_osint_claim
22/09/2026Segnalazione ransomware: AFRICA-TECH (IT services / document processing)ransomwareunverified_osint_claim
22/09/2026Segnalazione ransomware: FinSoft (Kolibri retail back-office software)ransomwareunverified_osint_claim
20/09/2026Segnalazione ransomware: Fanatics (global sports commerce platform)ransomwareunverified_osint_claim
20/09/2026Segnalazione ransomware: Fanatics (global sports commerce platform)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Inter (Venezuela's largest internet provider)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Inter (Venezuela's largest internet provider)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: PayPal support operations (Transcom WorldWide)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Ministry of Education — Argentinaransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Argentem Creek Partners (investment firm)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: AstraZeneca Türkiyeransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: STOKR (digital securities platform)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Konnatus (usucapião legal services)ransomwareunverified_osint_claim
18/09/2026ransomware.live: gruppo N0nthreat_intelligencepublic_index
18/09/2026Segnalazione ransomware: BeLi Teacher / FSC education centers (AWS)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: Vietnamese betting operator (GC789 network / Boundless TE)ransomwareunverified_osint_claim
18/09/2026Segnalazione ransomware: United Federation of Teachersransomwareunverified_osint_claim