N-W0rm

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.nworm

Threat Analysis

N-W0rm is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://bazaar.abuse.ch/browse/tag/N-W0rm/

→https://www.secuinfra.com/en/techtalk/n-w0rm-analysis-part-1/

→https://www.secuinfra.com/en/techtalk/n-w0rm-analysis-part-2/

Quick Facts

TypeAPT / Threat Group

Aliases4

Also Known As

win.nwormNWormnw0rmN-W0rm

External Intelligence

Malpedia: win.nworm

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search N-W0rm