Skip to content
Threat Feed
Subscribe

Actor

NightEagle

1 brief RSS
high threat

NightEagle APT Targets Russian Organizations with GhostContainer Backdoor

The NightEagle APT group is actively targeting organizations by exploiting compromised VPN credentials, deploying the memory-resident GhostContainer backdoor on Exchange servers, and utilizing legitimate tunneling tools for lateral movement.

Exchange Server NightEagle apt exchange backdoor tunnel
3t 1c