ransomware

nightspire

Provisional

Ransomware

Motivation

—

Attribution confidence

Provisional — not yet assessed

Provisional profile auto-created from leak-site claims — not analyst-vetted. A group's self-claim of a victim, not a confirmed breach.

Why it mattersRansomware actor, unrated confidence.

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Targets

Ozel & Ozel Laws OfficetargetLeak-site claim · ransomware.live2026-09-02
DiamondLeasetargetLeak-site claim · ransomware.live2026-08-30
Tianji Auto Care Service CompanytargetLeak-site claim · ransomfeed2026-08-12
MKS TransformatortargetLeak-site claim · ransomware.live2026-06-20
Sheraton Miramar Resort El GounatargetLeak-site claim · ransomware.live2026-06-02
basatamfitargetLeak-site claim · ransomware.live2026-05-25
Rawaj Consumer FinancetargetLeak-site claim · ransomware.live2026-05-19
Papa John's EgypttargetLeak-site claim · ransomware.live2026-05-16
TAKOSAN OTOMOBILtargetLeak-site claim · ransomware.live2026-05-14
PARS AR-GEtargetLeak-site claim · ransomware.live2026-03-31
TTAF DefensetargetLeak-site claim · ransomware.live2026-03-30
AKOL LAWtargetLeak-site claim · ransomware.live2026-02-18

Claimed victims · 15 tracked

Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →

Claim volume · last 12 months

ONDJFMAMJJAS

Date	Victim	Country	Sector
2026-09-11	Ozel & Ozel Laws Office	Türkiye	—
2026-09-11	DiamondLease	UAE	—
2026-09-02	Ozel & Ozel Laws Office	Türkiye

Useful?