Nightspire — 20251218

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date 2025-12-18

   We found your note. Who are you and what do you want?

2. Message 002 From Nightspire Actor / other Date Not recorded

   Send us your UUID

3. Message 003 From Victim Victim Date Not recorded

   Sorry do you mean this? [redacted]

4. Message 004 From Nightspire Actor / other Date Not recorded

   What can I help you?

5. Message 005 From Victim Victim Date Not recorded

   My team is asking who you are and what do you want?

6. Message 006 From Nightspire Actor / other Date Not recorded

   Actually we need $150k US Dollars for your decryption key and data safety.

7. Message 007 From Nightspire Actor / other Date Not recorded

   we have All your clients' information (Contacts, Drawings, Invoices...)*Your data also contains russians on your clients...All your employeer's data

8. Message 008 From Victim Victim Date Not recorded

   My teams is asking specifically if you can provide any examples like a list of files or actual files taken?

9. Message 009 From Victim Victim Date Not recorded

   My team is also asking what amount you are looking for to resolve this matter, and what we get once a payment is made?

10. Message 010 From Nightspire Actor / other Date Not recorded

    These images are some examples you want.All your files are zipped on our storage.

11. Message 011 From Nightspire Actor / other Date Not recorded

    It's better for you to make us to not to unzip all your files for leak or selling.150k is not big price for your company, even for you.The faster you pay, the less price you can pay.

12. Message 012 From Nightspire Actor / other Date Not recorded

    [IMG01.jpg] [IMG02.jpg] [IMG03.jpg] [filelist.7z.txt]

13. Message 013 From Victim Victim Date Not recorded

    Thank you for the update, I will get this information over to my team.

14. Message 014 From Victim Victim Date Not recorded

    My team is also wanting to know if you can prove the decryption key works?

15. Message 015 From Nightspire Actor / other Date Not recorded

    Send us Test Files. After some tests, we'll provide decryption key.But these files must not contain sensitive & recent information.

16. Message 016 From Victim Victim Date Not recorded

    OK, be back soon.

17. Message 017 From Nightspire Actor / other Date Not recorded

    If no payment is made in this week, your hacked news will be posted on our onion site.Then next week, your clients' information and drawings will be sent to below competitors.

18. Message 018 From Nightspire Actor / other Date Not recorded

    * Manufacturing in US* Manufacturing in US* Group Ltd in UK** * GmbH in Germany - *** und ** GmbH in Germany * in US

19. Message 019 From Victim Victim Date Not recorded

    Here are the files

20. Message 020 From Victim Victim Date Not recorded

    [testfile1.nspire] [testfile2.nspire] [testfile3.nspire]

21. Message 021 From Nightspire Actor / other Date Not recorded

    [redacted.xlsx]

22. Message 022 From Nightspire Actor / other Date Not recorded

    This file contains financial data. We cannot share the whole file. We're sending the screenshoot of this file

23. Message 023 From Nightspire Actor / other Date Not recorded

    https://gofile.io/[redacted]

24. Message 024 From Victim Victim Date Not recorded

    Thank you.

25. Message 025 From Nightspire Actor / other Date Not recorded

    Are you ready to pay?

26. Message 026 From Victim Victim Date Not recorded

    I will get these over to my team to review. Thank you for working with us.

27. Message 027 From Nightspire Actor / other Date Not recorded

    Just remember. Next week, your data will be posted on our site

28. Message 028 From Victim Victim Date Not recorded

    I wanted to follow-up with you as we are wanting to work with you to resolve this matter.Our team will be meeting Monday afternoon to discuss next steps.Can you please give us until Monday evening or Tuesday morning to get back with you?

29. Message 029 From Nightspire Actor / other Date Not recorded

    Ok. I hope there will be any goods deal at Tuesday evening.Actually, changes will be made from Wednesday morning.

30. Message 030 From Nightspire Actor / other Date Not recorded

    How was your meeting? Any deals made?

31. Message 031 From Victim Victim Date Not recorded

    My team is wanting to work with you to resolve this matter.However, the initial demand is more than we can offer at this time.My team is wondering if you can offer us a discount?

32. Message 032 From Victim Victim Date Not recorded

    My team is also concerned about the SQL database, working correctly.They asked if you would be willing to decrypt one file from the SQL server to confirm it works?

33. Message 033 From Nightspire Actor / other Date Not recorded

    What's your best offer to close this deal?

34. Message 034 From Nightspire Actor / other Date Not recorded

    And about files, we've already shown enoughly and exactly about decryption.Let's clear our agreement price first

35. Message 035 From Victim Victim Date Not recorded

    Thank you for the information. My team wants to work with you to resolve this matter.I was informed that we can offer you $22,500.00 USD for the decryption key, the deletion of our data and details on how you got into our network.

36. Message 036 From Victim Victim Date Not recorded

    If this is acceptable, we should be able to make payment within 48 hours.Again, we want to work with you, but the initial demand is more than we can offer at this time.

37. Message 037 From Victim Victim Date Not recorded

    Is our offer acceptable?

38. Message 038 From Nightspire Actor / other Date Not recorded

    $22500 is too low priceAt that price, we cannot even provide decryption keyWhat about $120000?

39. Message 039 From Victim Victim Date Not recorded

    Thank you for the update, I will provide the update to our team and get back with you as soon as possible.

40. Message 040 From Nightspire Actor / other Date Not recorded

    It's the last day we've said. If no deals made until Tomorrow evening, your data will be posted on Thursday 00:00. It's our last warning.

41. Message 041 From Victim Victim Date Not recorded

    Thank you for discount but my team is advising that is more than we can offer at this time.I was informed that we can offer you $42,750.00 USD for the decryption key, the deletion of our data and details on how you got into our network.

42. Message 042 From Victim Victim Date Not recorded

    If this is acceptable, we should be able to make payment within 48 hours.Again, we want to work with you to resolve this matter quickly. However, based on the assets currently available it will take additional time to acquire funding, if this is not acceptable.

43. Message 043 From Nightspire Actor / other Date Not recorded

    What about $110000?

44. Message 044 From Victim Victim Date Not recorded

    Thank you for discount but my team is advising that is more than we can offer at this time.I was informed that we can offer you $51,650.00 USD for the decryption key, the deletion of our data and details on how you got into our network.

45. Message 045 From Victim Victim Date Not recorded

    If this is acceptable, we should be able to make payment within 48 hours.Again, we want to work with you to resolve this matter quickly. Please work with us to resolve this.We are a small business with limited assets and funding.

46. Message 046 From Nightspire Actor / other Date Not recorded

    What about 105000 US Dollars?

47. Message 047 From Victim Victim Date Not recorded

    Thank you for discount but my team is advising that we cannot agree to that based on our current available funds.I was informed that we can offer you $56,500.00 USD for the decryption key, the deletion of our data and details on how you got into our network.

48. Message 048 From Victim Victim Date Not recorded

    If this is acceptable, we should be able to make payment within 48 hours.

49. Message 049 From Victim Victim Date Not recorded

    Please work with us as we are doing our best to work with you. We are a small business with limited assets and funding this is impacting on our ability to pay our employees.If this is not acceptable, we will need to look into loan options that will slow down our ability to make payment quickly and may or may not be possible.Will you accept our offer?

50. Message 050 From Nightspire Actor / other Date Not recorded

    With $100000, we'll provide the decryption key file, accesses which allowed us and anything you want to know

51. Message 051 From Nightspire Actor / other Date Not recorded

    We've reduced so much and this is the last amount we can ofer. We've already shown our best to you

52. Message 052 From Victim Victim Date Not recorded

    I will let my team know and get back with you.

53. Message 053 From Nightspire Actor / other Date Not recorded

    It's not so high price for you>And 9 Hours left until Thursday 00:00.

54. Message 054 From Victim Victim Date Not recorded

    It may take me until the morning to be able to get back to you. Again, we want to work with you to resolve this matter, can you give me a litttle extra time.

55. Message 055 From Nightspire Actor / other Date Not recorded

    Ok. But then, at that time, I hope you to not to say your little price again.

56. Message 056 From Victim Victim Date Not recorded

    Thank you for discount but my team is advising that amount is still high for us.I was informed that we can offer you $75,000.00 USD for the decryption key, the deletion of our data and details on how you got into our network.

57. Message 057 From Victim Victim Date Not recorded

    If this is acceptable, we should be able to make payment within 48 hours.

58. Message 058 From Victim Victim Date Not recorded

    Please work with us as we are doing our best to work with you. We are a small business and with this increase we will most likely lay off employees around Christmas.We are doing the best we can to work with you. Will you accept our offer?

59. Message 059 From Nightspire Actor / other Date Not recorded

    I'm sure that your company can pay $100000 as payment. Do not modify price anymore and lets make deal at $100000. That will be fine.

60. Message 060 From Victim Victim Date Not recorded

    My team has advised me that we can agree to your terms, and we accept your offer of $100,000.00 USD for the decryption key, the deletion of our data and details on how you got into our network.

61. Message 061 From Victim Victim Date Not recorded

    If you can confirm this and provide details on payment. We should be able to get this done with in the next 48 hours.

62. Message 062 From Nightspire Actor / other Date Not recorded

    We want payment in BTC

63. Message 063 From Victim Victim Date Not recorded

    Any more details?

64. Message 064 From Nightspire Actor / other Date Not recorded

    what do u want more?If you send money 100k USD to our BTC address, we'll follow all the activities you want

65. Message 065 From Victim Victim Date Not recorded

    Sorry I am not seeing the BTC address?

66. Message 066 From Nightspire Actor / other Date Not recorded

    Shall I share it now?

67. Message 067 From Victim Victim Date Not recorded

    If you agree to the 100,000 USD then yes, so I can start the process on our side.

68. Message 068 From Nightspire Actor / other Date Not recorded

    wait a min bc1[redacted]

69. Message 069 From Nightspire Actor / other Date Not recorded

    Here's our wallet addressWe're waiting on here

70. Message 070 From Victim Victim Date Not recorded

    Thank you I will get this over to the team and get the process started.

71. Message 071 From Nightspire Actor / other Date Not recorded

    when will this payment made? today?

72. Message 072 From Victim Victim Date Not recorded

    working on it now

73. Message 073 From Victim Victim Date Not recorded

    I was advised the payment was sent can you please confirm it.

74. Message 074 From Nightspire Actor / other Date Not recorded

    it's now on pending.

75. Message 075 From Victim Victim Date Not recorded

    Ok please confirm once completed.I double checked and was informed we sent the full amount, Please confirm once recieved.

76. Message 076 From Nightspire Actor / other Date Not recorded

    We're on here

77. Message 077 From Victim Victim Date Not recorded

    i was told they are working on it.

78. Message 078 From Nightspire Actor / other Date Not recorded

    So, what service do you want?Decryption key & data erase & reach out the access

79. Message 079 From Nightspire Actor / other Date Not recorded

    what do you want more?

80. Message 080 From Victim Victim Date Not recorded

    decryption key, the deletion of our data and details on how you got into our network

81. Message 081 From Nightspire Actor / other Date Not recorded

    So, choose your way for your decryption.We'll send delete log of your files at tomorrow morning timeAbout access, we exploited the [How NIGHTSPIRE ENCRYPTED]Choose your way for solutions.

82. Message 082 From Victim Victim Date Not recorded

    I am not sure what you mean by Choose your way?

83. Message 083 From Victim Victim Date Not recorded

    We need the decryption key for our systems.

84. Message 084 From Victim Victim Date Not recorded

    Also my team is asking if you can confirm which vulnerability was exploited.