securelist.com· Sep 16, 2026· by Stanislav Larinsky, Kaspersky Security Services

NightEagle targets Russian companies

Open Original Article ↗
Kaspersky GERT experts have uncovered a new campaign by the NightEagle APT, featuring the GhostContainer backdoor and tools hosted on GitHub. The group is also exploiting vulnerabilities in Active Directory and RDP.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Kerberos#DCSync#NightEagle#Traffic tunneling#GhostContainer#DLL#Active directory#Targeted attacks