GhostWebShell

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 17, 2026
Last mentionedSep 17, 2026

Timeline

1 articles · newest first

NightEagle Hackers Abuse Microsoft Dev Tunnels and GhostContainer to Breach Russian Companies

NightEagle (APT-Q-95) breached Russian firms using stolen VPN credentials, a GhostContainer Exchange backdoor, Dev Tunnels abuse, and DCSync.

Cyber Security NewsSep 17, 07:55 UTC · Sep 17, 2026Threat actorExploitedCVE-2020-0688 CVE-2019-07081 · 1 read

Related CVEs

by mentions

CVE-2019-0708100%9.8
Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)
published May 16, 2019Microsoft Remote Desktop ServicesKEVRansomwarePoC ×4
CVE-2020-0688100%8.8
RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys
published Feb 11, 2020Microsoft Exchange ServerKEVRansomwarePoC ×2

Appears with

NightEaglethreat actor · 1
Microsoftvendor · 1
rdp2tcpmalware · 1
Microsoft Exchangeproduct · 1
Kasperskyvendor · 1
GhostContainermalware · 1
APT-Q-95threat actor · 1
Securelistorganization · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.