Nova claims ransomware attack on CasaSafer, offers two-file decryption proof

Summary
Nova claims it can decrypt two files from CasaSafer as proof and threatens to withhold a full decryptor after 10 days without contact. The group says the website is down; the claims are unconfirmed.
Key points
- The record identifies CasaSafer, a Florence vacation-rental website, as the named victim and Nova as the ransomware actor.
- Nova claims it provided free decryption for two files as proof.
- The group says the victim must contact its support team within 10 days to obtain a full decryptor.
- Nova claims the website is currently down; the article provides no independent confirmation.
- The claim is attributed to Nova and monitored by ransomware[.]live.
Article Details
- Victim
- casasafer
- Victim Domain
- CasaSafer.it
- Claim Date
- 2026-05-27
- Encryption Status
- Unverified; nova claimed to provide free decryption of two files as proof.
- Exfiltration Status
- Unknown; no exfiltration claim was reported.
- Ransom Demand
- No monetary demand disclosed; nova instructed the victim to contact its support team for a full decryptor within 10 days.
- Leak Status
- Claim listed; no publication of victim data reported.
