Nightspire

☆ pin

Also known as NightSpire

Reports

First seen

Apr 7, 2026

Last seen

Aug 13, 2026

Motivation

Financial

Targeting

Sectors

Manufacturing ×7 Other ×7 Healthcare ×4 Professional Services ×3 Hospitality ×2 Retail & E-commerce ×2 Technology ×2 Energy & Utilities ×2

Victim regions

×1

×15

United States×15

Egypt×2

China×1

Spain×1

France×1

India×1

Malaysia×1

Germany×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1133 External Remote Services ×2T1486 Data Encrypted for Impact ×2T1567.002 Exfiltration Over Web Service: Exfiltration to Cloud Storage ×1T1021.001 Remote Services: Remote Desktop Protocol ×1T1491 Defacement ×1T1562 Impair Defenses ×1T1110 Brute Force ×1T1219 Remote Access Software ×1T1566 Phishing ×1T1490 Inhibit System Recovery ×1T1547 Boot or Logon Autostart Execution ×1T1083 File and Directory Discovery ×1

Indicators

domain ×58hash_sha256 ×4email ×2filename ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2024-40766 (exploited)CVE-2024-47575 (exploited)CVE-2024-50383 (exploited)

Recent reports

Medium

Nightspire

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Nightspire ransomware group publishes new victim on leak site

Nightspire publishes Tianji Auto Care Service Company as ransomware victim

Nightspire ransomware gang publishes new victim on leak site

Nightspire publishes new victim: The Mountain

Nightspire ransomware claims Kates Nussman Ellis Earle & Landolfi LLP

Nightspire ransomware gang publishes Akribis Systems Pte Ltd as victim

Nightspire ransomware claims Thai Seng International Co. Ltd as victim

Nightspire ransomware gang claims MKS Transformator as new victim

Nightspire ransomware claims OPTIDEA GmbH as victim

Nightspire ransomware gang claims Furama Bukit Bintang victim

Nightspire publishes K. Venkatesh as ransomware victim

Nightspire ransomware gang publishes Wings Argo Private Limited as victim

Nightspire ransomware gang publishes KSL Dirtworks LLC as victim

Nightspire publishes Diffusion de Produits Inoxydables as ransomware victim

Nightspire ransomware gang publishes TFG Benefits, Inc. as victim

Nightspire ransomware gang publishes Auto Royal Company as victim

Nightspire ransomware publishes Cedar Crest College as victim

Nightspire ransomware gang publishes Webosphere as new victim

Nightspire claims new victim: PCCC Realty LLC

Nightspire claims Grupo Riquelme ransomware victim on ransomware.live

Nightspire ransomware claims Artistic Smiles as victim

Nightspire ransomware gang publishes Blue Ox / Paul Bunyan / Lumberjack Electric as victim

Nightspire ransomware gang claims Dean Cosmetic Dentistry breach

Nightspire publishes new victim: Guy E* & F*, P.A

Nightspire publishes Central Texas victim on ransomware.live

Nightspire publishes new victim: Ri* Co Europe S.r.l.

Nightspire ransomware gang claims new victim

Nightspire claims Sheraton Miramar Resort El Gouna as ransomware victim

Nightspire publishes new victim on ransomware.live

Nightspire ransomware gang claims Silsbee Police Department as victim

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Nightspire ransomware group publishes new victim on leak site

Nightspire publishes Tianji Auto Care Service Company as ransomware victim

Nightspire ransomware gang publishes new victim on leak site

Nightspire publishes new victim: The Mountain

Nightspire ransomware claims Kates Nussman Ellis Earle & Landolfi LLP

Nightspire ransomware gang publishes Akribis Systems Pte Ltd as victim

Nightspire ransomware claims Thai Seng International Co. Ltd as victim

Nightspire ransomware gang claims MKS Transformator as new victim

Nightspire ransomware claims OPTIDEA GmbH as victim

Nightspire ransomware gang claims Furama Bukit Bintang victim

Nightspire publishes K. Venkatesh as ransomware victim

Nightspire ransomware gang publishes Wings Argo Private Limited as victim

Nightspire ransomware gang publishes KSL Dirtworks LLC as victim

Nightspire publishes Diffusion de Produits Inoxydables as ransomware victim

Nightspire ransomware gang publishes TFG Benefits, Inc. as victim

Nightspire ransomware gang publishes Auto Royal Company as victim

Nightspire ransomware publishes Cedar Crest College as victim

Nightspire ransomware gang publishes Webosphere as new victim

Nightspire claims new victim: PCCC Realty LLC

Nightspire claims Grupo Riquelme ransomware victim on ransomware.live

Nightspire ransomware claims Artistic Smiles as victim

Nightspire ransomware gang publishes Blue Ox / Paul Bunyan / Lumberjack Electric as victim

Nightspire ransomware gang claims Dean Cosmetic Dentistry breach

Nightspire publishes new victim: Guy E******* & F*******, P.A

Nightspire publishes Central Texas victim on ransomware.live

Nightspire publishes new victim: Ri***** Co**** Europe S.r.l.

Nightspire ransomware gang claims new victim

Nightspire claims Sheraton Miramar Resort El Gouna as ransomware victim

Nightspire publishes new victim on ransomware.live

Nightspire ransomware gang claims Silsbee Police Department as victim

Nightspire publishes new victim: Guy E* & F*, P.A

Nightspire publishes new victim: Ri* Co Europe S.r.l.