Nightsky
Ransomware Group Profile
Overview
Night Sky is a China-nexus ransomware group (attributed to the "Emperor Dragonfly" cluster) that emerged in late 2021, gaining notoriety in early 2022 by exploiting the Log4Shell vulnerability (CVE-2021-44228) to target corporate networks across healthcare, finance, government, and manufacturing using multi-extortion tactics.
Dark Web Infrastructure (1)
gg5ryfgogainisskdvh4y373ap3b2mxafcibeh2lvq5x7fx76ygcosad.onion
Associated Threat Actors (1)
Activity Timeline
First Seen2022
Last Seen2022
Leak Sites1
Quick Actions