NightEagle targets Russian companies

Reported 16 Sep 2026 by otx · Severity: medium

The NightEagle APT group (APT-Q-95), active since 2023 and initially targeting Asian organizations, has expanded operations to Russian enterprises. Attackers gain initial access through compromised VPN credentials originating from Cloudflare WARP tunnels and European infrastructu