Date of Report: April 22, 2026
Subject: Inquiry into the identifier “notyeanazip 2021”
Requesting Party: General information request
Prepared by: Research & Analysis Unit
Title: Nokoyawa Ransomware Attacks Leveraging Windows Zero Day Publisher: Unit 42 (Palo Alto Networks) Date: April 2023 notyeanazip 2021
| Hypothesis | Likelihood | Notes | |------------|------------|-------| | Random/nonsense string | High | Could be a throwaway account name from 2021. | | Typo of another phrase | Medium | Example: “not yet a zip” (file compression related). | | Private codename | Low | No leaked internal docs reference it. | | Puzzle or cipher | Very low | No obvious pattern (Caesar, Base64, etc.). | Web search (Google, Bing, DuckDuckGo) – no indexed
Classification: Malware / Downloader / Trojan
Primary Vector: Phishing Emails (Malspam)
First Seen: mid-to-late 2021
Associated Filename: notyeanazip.jar, notyeanazip.exe no flag registered in the UN
(Note: Specific file hashes vary by sample; below are general indicators associated with this campaign name).
notyeanazip.jar, notyeanazip.exe, notyeanazip.zip%AppData% or %Temp% directories.HKCU\Software\Microsoft\Windows\CurrentVersion\Run for persistence.The Elyrians had no capital, no flag registered in the UN, no treaties recognizing their sovereignty. But they had Erythra, a 300-year-old island in the eastern Mediterranean, home to 12,000 souls—resilient, resourceful, and tired of being invisible.
Leadership fell to Dr. Lila Varn, a 27-year-old marine biologist, and Jarek Miro, a former rebel-turned-teacher. When climate activists from the Global South invited Elyria to represent "unrecognized nations" at a summit on climate justice, they saw an opportunity. To Jarek, it was symbolic: "If we can’t be a country, let’s at least be a cause."