Nightsky is a ransomware operator no longer publishing new disclosures. Darkfield has indexed 2 public victims claimed by this operator between January 4, 2022. Nightsky is a relatively obscure ransomware group that first emerged in January 2022, with only two documented victims indicating limited operational scale or highly selective targeting for financial gain. The group's origin and potential affiliations remain largely unknown, with no publicly documented information from major security firms or law enforcement agencies regarding their geographic base of operations or connections to established ransomware ecosystems. Due to the limited public reporting on this group, specific details about their attack methodologies, initial access vectors, encryption techniques, or whether they employ double or triple extortion tactics have not been documented by reputable threat intelligence sources. No major campaigns, high-profile victims, or significant law enforcement actions against Nightsky have been publicly reported by CISA, FBI, or established security researchers. The current operational status of Nightsky remains unclear given the sparse public intelligence available about this group's activities beyond the initial 2022 timeframe.

Recent disclosures by Nightsky

All 2 indexed disclosures. Click any row for the full per-victim dossier.

• AKIJ GROUPJanuary 4, 2022
• 東京コンピュータサービスTechnology · January 4, 2022

See every disclosure indexed for Nightsky →