TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.5K subscribers
Post #32566 32
#ParsedReport #CompletenessHigh
16-09-2026

NightSpire Ransomware: Threat Actor Profile - Barricade Cyber Solutions

https://barricadecyber.com/nightspire-ransomware/

Report completeness: High

Actors/Campaigns:
Xdragon128
Cuteliyuan

Threats:
Nightspire
Qtox_tool
Anydesk_tool

Victims:
Manufacturing, Healthcare, Professional services, Construction, Technology

Industry:
Healthcare, Entertainment, Retail, Government, Education, Logistic

Geo:
Turkey, Thailand, Japan, France, Spain, South africa, United states, Italy, Egypt, India, Brazil

TTPs:
Tactics: 5
Technics: 7

IOCs:
File: 5
Url: 3
Email: 7
Domain: 7
IP: 3
Hash: 2

Soft:
ProtonMail, Telegram, Gmail, FortiGate, Chrome, WinSCP

Crypto:
bitcoin

Languages:
golang
Barricade Cyber Solutions NightSpire Ransomware: Threat Actor Profile - Barricade Cyber Solutions NightSpire Ransomware is a fast-moving data-extortion crew that breaks in through your perimeter, steals everything it can reach, encrypts what is left, and then pressures you on a public leak site and in a private negotiation portal. Updated September 2026…
More from @aptreports
  1. Oct 1, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 1, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 1, 2026#ParsedReport #CompletenessMedium 30-09-2026 TOPHIT. Part 1: A one-operator npm typosquat…
  4. Oct 1, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 1, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 1, 2026#ParsedReport #CompletenessMedium 30-09-2026 Baba Yaga on the Hook: New Mimbrob Activity T…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →