Description
NightSky (a.k.a. Night Sky) is a ransomware family that researchers documented targeting corporate networks in early 2022. Cyberattackers deployed it by exploiting the Log4j vulnerability against VMware Horizon servers, and Microsoft's researchers listed it among the ransomware as a service brands operating at the time. A 2022 Secureworks report tied the family to the BRONZE STARLIGHT operators alongside related strains such as ATOMSILO, LockFile, Pandora, and Rook.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Also known as
Nightsky
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.NightSky.5 |
| Trojan.Ransom.NightSky.1 |
| Trojan.Ransom.NightSky.B |
| Win64.Ransomware.Nightsky |
| Win64.Ransomware.NightSky |
