Threats Tagged 'cyber extortion'
View all threats tagged with 'cyber extortion'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cyber extortion'
Click on any threat for detailed analysis and mitigation recommendations
NightSpire, a ransomware group active since February 2025, employs aggressive tactics and a specialized infrastructure similar to Ransomware-as-a-Service models. They operate a Dedicated Leak Site, posting victim information and countdown timers for data release. The group uses threatening language and offers various communication channels for negotiations. NightSpire targets diverse industries across multiple countries, utilizing a double-extortion strategy. Their ransomware encrypts files using block or full encryption methods, with specific extensions encrypted in 1MB blocks for efficiency. Encrypted files receive a .nspire extension, and a ransom note is created in each affected folder. The ransomware's structure includes an AES symmetric key encrypted with an RSA public key at the end of each infected file. Join the discussion | AlienVault OTX General | 08/29/2025, 20:20:00 UTC Added: 09/01/2025, 08:47:39 UTC |
Showing 1 to 1 of 1 result