Nightsky
Aliases: Night Sky
- First seen
- 2021-12-27 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-06-10 17:55:28
- Profile updated
- 2026-07-07 13:02:28
Targeted industries: manufacturing
Targeted regions: country_code:us
Context
Nightsky is a ransomware family that targets manufacturing industries, primarily in the United States. It encrypts files and demands a ransom for decryption keys.
Detection coverage
- 1 YARA rules
Exploited vulnerabilities
- CVE-2021-44228 (vulnerability)
Detection rules
- MALPEDIA_Win_Nightsky_Auto (yara-rule)
Reports & references
- Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
- Microsoft — Guidance For Preventing Detecting And Hunting For Cve 2021 44228 Log4J 2 Exploitation (report)
- twitter.com — 1480734487000453121 (report)
- secureworks.com — Bronze Starlight Ransomware Operations Use Hui Loader (report)
- twitter.com — 1480742363991580674 (report)
- bleepingcomputer.com — Night Sky Is The Latest Ransomware Targeting Corporate Networks (report)
- cynet.com — Threats Looming Over The Horizon (report)
- youtube.com — Watch (report)
- ransomlook.io — Nightsky (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Nightsky (report)