Threat actorTracked since 2026-05

NightSpire

Also known as:NightSpire GroupNightSpire Ransomware Operators

As of 2026-05-30, NightSpire is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as NightSpire Group, NightSpire Ransomware Operators.

Tracked threats: 11 high
First seen: 2026-052026-05-23
Last seen: 2026-052026-05-23
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced

1 tracked threat(s) · Categories: RANSOMWARE

Activity timeline

NightSpire appears in 1 tracked threat between 2026-05-23 and 2026-05-23.

Tracked threats

NightSpire Ransomware — Go-Based Encryptor with .nspire Extension, RDP-First Intrusions, and Living-off-the-Land Tradecraft (Picus, Huntress, SonicWall, Broadcom)HIGH2026-05-23