Ransomware
nightspire
0mentions, 7 days
0mentions, 30 days
32victims posted, 30 days
nonelast mentioned
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
- REFSA S.A.Nov 2, 2026
- **F*A *.AOct 31, 2026
- U**IN* GroupOct 18, 2026
- S*o**n* Public SchoolsOct 15, 2026
- Colorado TexasOct 14, 2026
- ***o* **s**e** SolutionsOct 14, 2026
- Cognosis LimitedOct 12, 2026
- G** Re******* LtdOct 12, 2026
- Spo****** Public SchoolsOct 12, 2026
- MGT Lojistik AŞOct 12, 2026
- KP IndustriesOct 12, 2026
- The Bernard Osher FoundationOct 9, 2026
- Fondy Food PantryOct 9, 2026
- PMG Project Management GroupOct 9, 2026
- Mäntelhaus Kaiser GmbH & Co. KGOct 9, 2026
- INAPIOct 9, 2026
- Medcom Tech InformationOct 9, 2026
- WAGA Enterprises Architects LLCOct 9, 2026
- Heidi's Events & Catering, Inc.Oct 9, 2026
- Vietnam SuperPortOct 9, 2026
- Sangre de Cristo Arts and Conference CenterOct 9, 2026
- Valvorobica Industirale S.p.AOct 9, 2026
- KC Pharmaceuticals, IncOct 9, 2026
- Sociedad Portuaria Mardique S.A.Oct 8, 2026
- Sinae Phuket Luxury HotelOct 8, 2026
- LumabuiltOct 8, 2026
- INI FiocruzOct 8, 2026
- Royal EGTOct 8, 2026
- Deese and Locklear Chiropractic CenterOct 8, 2026
- KSL DirtworksOct 8, 2026
A leak-site post is the group's claim, not confirmed by the victim.
Recent activity
No posts or advisories have named this actor recently.
References
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.
