This is the name of a specific Remote Access Trojan (RAT) used by the Interlock group, not the name of the group itself.
NodeSnake is a custom Remote Access Trojan (RAT) developed and deployed by the Interlock ransomware gang. It is written in JavaScript and executed using NodeJS, an uncommon approach that helps the malware evade detection by traditional security systems. Its primary function is to gain and maintain persistent access to a compromised network, enabling reconnaissance, data theft, and the eventual deployment of ransomware. Key features and evolution Node Snake has been continually developed and refined by the Interlock gang to enhance its stealth and capabilities.