Tag: cyber-extortion

2 Attack Reports | 0 Vulnerabilities

Attack reports

Warning About NightSpire Ransomware Following Cases of Damage in South Korea

NightSpire, a ransomware group active since February 2025, employs an aggressive strategy and specialized infrastructure similar to Ransomware-as-a-Service models. They operate a Dedicated Leak Site, posting victim information and countdown timers for data release. Using highly threatening language…
ransomware
encryption
south korea
double-extortion
nightspire
rsa
2025-08-29
2025-09-01
aes
cyber extortion
dedicated leak site
Published: September 1, 2025
Downloadable IOCs: 2

Mallox Ransomware: Linux Variant Decryptor Found

The report analyzes the Mallox ransomware, which has been active since mid-2021 and focuses on multi-extortion by encrypting victims' data and threatening to post it on public TOR sites. Initially targeting Windows systems, Mallox has now developed Linux variants using custom Python scripts for pay…
ransomware
encryption
mallox
targetcompany
2024-07-04
fargo
cyber-extortion
mawahelper
Published: July 4, 2024
Downloadable IOCs: 5
Click here to see more Attack Reports