Signalis
sign in--:--:--UTC
Threat actors

Orova

☆ pin
Reports
54
First seen
Aug 4, 2026
Last seen
Oct 13, 2026
Motivation
Financial

Targeting

Sectors
Manufacturing ×10Other ×10Healthcare ×6Professional Services ×5Retail & E-commerce ×3Hospitality ×3Technology ×3Financial Services ×2
Victim regions
×1
×17
United States×17
Hong Kong SAR China×6
Taiwan×5
Thailand×1
Japan×1
Brazil×1
Egypt×1
United Kingdom×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×96ip_v4 ×29hash_sha1 ×7hash_md5 ×2hash_sha256 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Orova ransomware gang publishes Durga Bearings as victim

ransomware.liveHigh

Orova ransomware claims Codar (Pte) Ltd as victim

ransomware.liveHigh

Orova ransomware gang claims breach of Alfameli Group

ransomware.liveHigh

Orova ransomware gang publishes The Park Lane Hong Kong as victim

ransomware.liveHigh

Orova ransomware claims Libre Wireless Technologies victim

ransomware.liveHigh

Orova ransomware gang publishes Amantya Technologies as victim

ransomware.liveHigh

Orova publishes Gatetech Technology as ransomware victim

ransomware.liveHigh

Orova ransomware gang publishes Siddhi Green Excellence as victim

ransomware.liveHigh

Orova ransomware gang publishes Euramex Management Group as victim

ransomware.liveHigh

Orova ransomware claims ASYS Corporation as new victim

ransomware.liveHigh

Orova ransomware gang claims Fu Sheng Industrial Co., Ltd victim

ransomware.liveHigh

Orova ransomware gang publishes ITC Properties Group Limited as victim

ransomware.liveHigh

Orova ransomware gang publishes South Pacific Hotel Limited as victim

ransomware.liveHigh

Orova ransomware gang publishes Central Florida Civil LLC as victim

ransomware.liveHigh

Orova ransomware gang publishes Arich Enterprise Co., Ltd. as victim

ransomware.liveHigh

Orova ransomware gang publishes Bai-chi CPA Firm as victim

ransomware.liveHigh

Orova publishes DL Holdings Group as ransomware victim

ransomware.liveHigh

Orova ransomware gang claims Smartsoft as victim

ransomware.liveHigh

Orova ransomware gang claims Ganzhou Xinye Craft Co., Ltd.

ransomware.liveHigh

Orova Ransomware Claims First Baptist Church of Belleview

ransomware.liveHigh

Orova ransomware gang claims attack on Hilliard's Air Conditioning & Heating Inc

ransomware.liveMedium

Orova ransomware gang publishes Gemstone UK as victim

ransomware.liveHigh

Orova ransomware publishes St Theresa Catholic Church as victim

ransomware.liveMedium

Orova ransomware claims Stoneybrook West Master Association as victim

ransomware.liveHigh

Orova ransomware gang publishes Stonecrest POA as victim

ransomware.liveHigh

Orova ransomware gang publishes Magnolia Dental as victim

ransomware.liveMedium

Orova ransomware publishes Country Oaks Veterinary Clinic as victim

ransomware.liveHigh

Orova ransomware: David King Architect victim claim

ransomware.liveHigh

Orova ransomware gang publishes Woodside Ranch as victim

ransomware.liveMedium

Orova ransomware gang publishes FixIT Tek as victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans