RANSOMWARE VICTIMMANUFACTURINGDUPLICATE CLAIM

Fico Ferragens Indústria e Comércio Ltda

www.ficoferragens.com.br/fico/portugues/home
NIGHTSPIRE📍 Brazil (BR)📅 February 7, 2026
8
same group

Attack Intelligence

Fico Ferragens Indústria e Comércio Ltda was compromised in a ransomware attack attributed to NIGHTSPIRE in February 2026. The organization, operating in the Manufacturing sector in Brazil, was added to the group's data leak site as part of an extortion campaign.

NIGHTSPIRE operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Data is not available now.

Additional Details

Other Victims — NIGHTSPIRE (8)

Quick Facts

CountryBrazil (BR)
SectorManufacturing
Attack DateFeb 7, 2026
Domainwww.ficoferragens.com.br/fico/portugues/home
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

NIGHTSPIRE
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.