Threat Intelligence / Actor / NightSpire

NightSpire

1 tracked threat(s) · Categories: RANSOMWARE

Also known as: NightSpire Group, NightSpire Ransomware Operators

Tracked threats

NightSpire Ransomware — Go-Based Encryptor with .nspire Extension, RDP-First Intrusions, and Living-off-the-Land Tradecraft (Picus, Huntress, SonicWall, Broadcom) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence