Watch Floor
Ransomware

nightspire

0mentions, 7 days
0mentions, 30 days
32victims posted, 30 days
nonelast mentioned

CVEs in recent coverage

No CVEs named alongside this actor in the last 90 days.

Recent victims

  • REFSA S.A.
    Nov 2, 2026
  • **F*A *.A
    Oct 31, 2026
  • U**IN* Group
    Oct 18, 2026
  • S*o**n* Public Schools
    Oct 15, 2026
  • Colorado Texas
    Oct 14, 2026
  • ***o* **s**e** Solutions
    Oct 14, 2026
  • Cognosis Limited
    Oct 12, 2026
  • G** Re******* Ltd
    Oct 12, 2026
  • Spo****** Public Schools
    Oct 12, 2026
  • MGT Lojistik AŞ
    Oct 12, 2026
  • KP Industries
    Oct 12, 2026
  • The Bernard Osher Foundation
    Oct 9, 2026
  • Fondy Food Pantry
    Oct 9, 2026
  • PMG Project Management Group
    Oct 9, 2026
  • Mäntelhaus Kaiser GmbH & Co. KG
    Oct 9, 2026
  • INAPI
    Oct 9, 2026
  • Medcom Tech Information
    Oct 9, 2026
  • WAGA Enterprises Architects LLC
    Oct 9, 2026
  • Heidi's Events & Catering, Inc.
    Oct 9, 2026
  • Vietnam SuperPort
    Oct 9, 2026
  • Sangre de Cristo Arts and Conference Center
    Oct 9, 2026
  • Valvorobica Industirale S.p.A
    Oct 9, 2026
  • KC Pharmaceuticals, Inc
    Oct 9, 2026
  • Sociedad Portuaria Mardique S.A.
    Oct 8, 2026
  • Sinae Phuket Luxury Hotel
    Oct 8, 2026
  • Lumabuilt
    Oct 8, 2026
  • INI Fiocruz
    Oct 8, 2026
  • Royal EGT
    Oct 8, 2026
  • Deese and Locklear Chiropractic Center
    Oct 8, 2026
  • KSL Dirtworks
    Oct 8, 2026

A leak-site post is the group's claim, not confirmed by the victim.

Recent activity

No posts or advisories have named this actor recently.

References

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.