Nova appears to refer to a ransomware-as-a-service ("RaaS") infrastructure provider. Public threat reporting indicates that affiliates leveraging the Nova victim extortion site are known to use a Rust-based ransomware developed by the RALord ransomware operation, although an original ".nova" ransomware family has been identified as well.^{[SonicWall Nova Ransomware April 11 2025]}^{[Cyble April 17 2025]}