About
Written by ThreatCluster from 4 storiesNightSpire is a ransomware group that uses a double-extortion model, encrypting data and threatening disclosure while gaining access through remote-access channels, notably exploiting RDP vulnerabilities and remote admin tools. Victims are drawn from Manufacturing, Technology, Healthcare, Business Services, and Construction, with the US, India, France, Turkey, and Hong Kong appearing most frequently in the victim set. A May 2026 incident described in ThreatCluster reporting shows NightSpire targeting hospitals and government offices via RDP exploitation, illustrating a pattern of rapid, cross-sector expansion and infrastructure-targeted activity.
Sectors: Manufacturing, Healthcare, Technology · Countries: US, TR, IN
Recent victims
View all →| Victim | Sector | Country | Posted | Status |
|---|---|---|---|---|
| Cognosis Limited | Technology | GB | Oct 12, 2026 | |
| G** Re******* Ltd | Not Found | Oct 12, 2026 | ||
| Spo****** Public Schools | Education | Oct 12, 2026 | ||
| MGT Lojistik AŞ | Transportation | TR | Oct 12, 2026 | |
| KP Industries | Not Found | GB | Oct 12, 2026 | |
| Fondy Food Pantry | Agriculture and Food Production | US | Oct 9, 2026 | |
| The Bernard Osher Foundation | Education | US | Oct 9, 2026 | |
| PMG Project Management Group | Professional Services | AE | Oct 9, 2026 | |
| Mäntelhaus Kaiser GmbH & Co. KG | Manufacturing | DE | Oct 9, 2026 | |
| INAPI | Technology | DZ | Oct 9, 2026 | |
| Medcom Tech Information | Healthcare | ES | Oct 9, 2026 | |
| WAGA Enterprises Architects LLC | Professional Services | US | Oct 9, 2026 | |
| Heidi's Events & Catering, Inc. | Hospitality | US | Oct 9, 2026 | |
| Sangre de Cristo Arts and Conference Center | Hospitality | US | Oct 9, 2026 | |
| Vietnam SuperPort | Transportation | VN | Oct 9, 2026 | |
| Valvorobica Industirale S.p.A | Manufacturing | IT | Oct 9, 2026 | |
| KC Pharmaceuticals, Inc | Healthcare | US | Oct 9, 2026 | |
| Asociación de Escribanos del Uruguay | Professional Services | UY | Oct 8, 2026 | |
| Sociedad Portuaria Mardique S.A. | Transportation | CO | Oct 8, 2026 | |
| Sinae Phuket Luxury Hotel | Hospitality | TH | Oct 8, 2026 | |
| INI Fiocruz | Healthcare | BR | Oct 8, 2026 | |
| Lumabuilt | Manufacturing | US | Oct 8, 2026 | |
| Royal EGT | Energy & Utilities | EG | Oct 8, 2026 | |
| Deese and Locklear Chiropractic Center | Healthcare | US | Oct 8, 2026 | |
| KSL Dirtworks | Manufacturing | US | Oct 8, 2026 |
Found by ThreatCluster
24 total from our crawlListed on this group's leak site and not present in the aggregated feeds.