Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
-
Enterprises in Russia have become the target of three separate threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky.
The vendor states that NightEagle (also known as APT-Q-95) is a threat actor active since at least 2023. The attacks attributed to this group involve new techniques for persistence and lateral movement. The three clusters have been observed deploying a combination of backdoors, ransomware, and wipers against Russian organizations.
At this time, no specific CVE identifiers, advisory IDs, or indicators of compromise have been provided in the available reporting. Organizations seeking to assess exposure should review Kaspersky's published research for technical details and detection guidance.
- Threat clusters: NightEagle (APT-Q-95), Hacking Cat, Toy Ghouls
- Targeted region: Russia
- Capabilities observed: backdoors, ransomware, wipers
- Notable TTPs (NightEagle): persistence and lateral movement techniques
- Actor activity window: at least since 2023
Source: [email protected] (The Hacker News)
Does your organization track any of these three threat clusters, and if so, what detection or mitigation measures are you currently relying on?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login