Nightspire
Nightspire is a ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 59 countries, including the United States and the United Kingdom. It uses 38 MITRE ATT&CK techniques.
Also known as
- nightspire Team
- Techniques
- 38
- Exploited CVEs
- No CVE data
- First seen
- Mar 12, 2025
- Last seen
- Sep 1, 2026
- Record updated
Who They Target.
Sectors · 16
Countries · 59
About Nightspire.
NightSpire is a ransomware group that first emerged in March 2025 and rapidly claimed over 250 victims across retail, manufacturing, healthcare, finance, and education sectors in the US, France, India, Taiwan, and Japan, using aggressive double-extortion with ransom deadlines as short as two days.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.