DIREWOLF and NIGHTSPIRE Ransomware Attacks Target Multiple Organizations

• •Multiple organizations have been claimed as ransomware victims by DIREWOLF and NIGHTSPIRE.
• •No confirmed details on system encryption or ransom demands have been provided.
• •The claims are unverified, and the actual impact on the affected organizations remains unclear.

On September 11, 2026, the Port of Tanjung Pelepas was listed as a victim of the DIREWOLF ransomware group, with no details on the attack vector or impact provided. Similarly, the NIGHTSPIRE group has claimed attacks on DiamondLease, Ozel & Ozel Laws Office, and Perimetral Oriental de Bogotá S.A.S., with reports indicating potential data theft but lacking specifics on system encryption or ransom demands. The incidents are characterized by unverified claims, as no substantial evidence or corroboration has been presented. The lack of detailed information on the nature of the attacks raises concerns about the validity of the claims. As of now, the status of these incidents remains uncertain, with no confirmed operational impacts or ransom amounts disclosed.