Ransom! casasafer (MAY-2026)

Ransom! casasafer (MAY-2026)
Nova ransomware claim against casasafer (CasaSafer.it), targeting a Florence vacation rental website and stating they provided free file decryption as proof while asking victims to contact their support team for a full decryptor within 10 days. The actor claims the website is currently down and threatens that no decryptor will be available after 10 days, listing impacted country(​s) as: #Italy

Incident Details

  • Victim: casasafer
  • Sector: Consumer Services
  • Country:
  • Actor: nova
  • Source: http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/casasafer
  • Discovered: 2026-05-27T22:59:11.771217+00:00
  • Published: 2026-05-27T00:00:00+00:00

Information

  • CasaSafer.it is the official website for a vacation rental property in the heart of Florence, Italy, offering four independent apartments for short- and long-term stays.
  • Nova provided free decryption of 2 files as proof.
  • They instructed the victim to contact the support department to obtain the full decryptor program.
  • If no contact was made within 10 days, decryption would no longer be available.
  • The site is currently down.

Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live