Ransomware Group

Nitrogen

Status: active • First seen 2023-0960+ known victims

Nitrogen tricks IT professionals by putting fake ads on search engines. When someone searches for an IT tool, they might click a fake ad and download ransomware instead.

Overview

Nitrogen spreads through malvertising campaigns, displaying fake ads for IT tools that lead victims to download ransomware instead of legitimate software.

Target Industries

Technology, Professional Services, Manufacturing, IT Services

How They Attack

  • Malvertising
  • IT tool impersonation
  • Double extortion
  • Search engine abuse

Notable Victims

IT professionals (2023), Technology companies

Is your business exposed?

How to Protect Against Nitrogen

  1. 1.

    Use ad blockers on corporate systems

  2. 2.

    Only download software from official sources

  3. 3.

    Train staff on malvertising awareness

MITRE ATT&CK Techniques

T1189, T1486, T1567, T1204

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required