Security2 dSeptember 18, 2026, 20:24

Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia

Cyber-espionage group NightEagle (APT-Q-95), which previously attacked Chinese defense and technology companies, has shifted to Russian organizations. According to Kaspersky, the hackers entered networks via VPN using stolen credentials, then deployed the GhostContainer backdoor on Microsoft Exchange servers.

The Record Open source

Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia

Group active since 2023, previously attacked China, now Russia
Network entry via VPN with stolen credentials
GhostContainer backdoor gives remote control over Exchange servers
Tools stored on GitHub under names AdobeSync and TrueConf

#Kaspersky#Microsoft#GitHub

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents

Security

Tetragon in AWS CodeBuild blocks npm postinstall network access

Security

Kaspersky uncovers malware campaign spread via movie torrents

Security

Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents

Tetragon in AWS CodeBuild blocks npm postinstall network access

Kaspersky uncovers malware campaign spread via movie torrents

Z.ai silently uploaded devs' local data: 313MB and 564 upload attempts