APT-Q-95

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 21, 2026
Last mentionedSep 21, 2026

Timeline

1 articles · newest first

NightEagle Uses BlueKeep and DCSync to Move Toward Active Directory Domain Controllers

NightEagle espionage group used GhostContainer, BlueKeep exploitation, and DCSync attempts to compromise Russian organizations and target Active Directory controllers.

GBHackersSep 21, 13:27 UTC · Sep 21, 2026Threat actorExploitedCVE-2020-0688 CVE-2019-07083 · 2 reads

Related CVEs

by mentions

CVE-2019-0708100%9.8
Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)
published May 16, 2019Microsoft Remote Desktop ServicesKEVRansomwarePoC ×4
CVE-2020-0688100%8.8
RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys
published Feb 11, 2020Microsoft Exchange ServerKEVRansomwarePoC ×2

Appears with

Neo-reGeorgmalware · 1
NightEaglethreat actor · 1
NightEagleorganization · 1
rdp2tcpmalware · 1
GitHubproduct · 1
Microsoft Dev Tunnelsproduct · 1
Russian organizationsvictim · 1
Microsoft Exchangeproduct · 1
Kasperskyvendor · 1
GhostContainermalware · 1
APT-Q-95threat actor · 1
Active Directoryproduct · 1
Kasperskyorganization · 1

Entities are extracted by the model from each article. First seen Sep 21, 2026, last mentioned Sep 21, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.