Nevada

Nevada is a ransomware-as-a-service (RaaS) program referenced in reporting on the Russian-language cybercrime forum RAMP. RAMP advertised Nevada among 14 RaaS programs, and one cited listing shows Nevada offering an 85/15 affiliate/operator revenue split in December 2022. Separately, Nevada Ransomware is identified as one of multiple ransomware families observed targeting VMware ESXi systems in the wild. The provided content does not attribute Nevada to a specific nation state or provide high-confidence details on its operators, malware lineage, or distinct sub-groups beyond the alias/name Nevada.