<![CDATA[Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers]]>

<![CDATA[Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers]]>Enterprises in Russia have become the target of three separate threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky.

The vendor states that NightEagle (also known as APT-Q-95) is a threat actor active since at least 2023. The attacks attributed to this group involve new techniques for persistence and lateral movement. The three clusters have been observed deploying a combination of backdoors, ransomware, and wipers against Russian organizations.

At this time, no specific CVE identifiers, advisory IDs, or indicators of compromise have been provided in the available reporting. Organizations seeking to assess exposure should review Kaspersky's published research for technical details and detection guidance.

Threat clusters: NightEagle (APT-Q-95), Hacking Cat, Toy Ghouls
Targeted region: Russia
Capabilities observed: backdoors, ransomware, wipers
Notable TTPs (NightEagle): persistence and lateral movement techniques
Actor activity window: at least since 2023

Source: info@thehackernews.com (The Hacker News)

Does your organization track any of these three threat clusters, and if so, what detection or mitigation measures are you currently relying on?

]]>https://xploitlk.com/topic/364/three-threat-groups-target-russian-enterprises-with-backdoors-ransomware-and-wipersRSS for NodeTue, 27 Oct 2026 08:52:11 GMTThu, 17 Sep 2026 06:30:29 GMT60