Resultados

2 casos · pág. 1/1

securelist.com · há 1d exploit público high

NightEagle (APT-Q-95) targets Russian organizations with GhostContainer Exchange backdoor and RDP tunneling

Kaspersky GERT reports that the NightEagle APT (also tracked as APT-Q-95), active since at least 2023 and previously focused on Asia, is now attacking businesses in Russia. The attackers usually gain access through compromised valid credentials on corporate VPNs, connecting from Russian IPs tied to Cloudflare WARP tunnels and from Europea…

CVE-2020-0688 CVE-2019-0708 NightEagle APT-Q-95

unit42.paloaltonetworks.com · há 1d high

Iranian-aligned CL-STA-1178 'Blinder Tunnel' campaign hits Iraqi critical infrastructure with trojanized Dubai Airports coding lures

Unit 42 attributes with high confidence to an Iranian state-aligned actor, tracked as CL-STA-1178, a campaign called Blinder Tunnel. In March 2026 it targeted an individual in Iraq's critical infrastructure sector, after infrastructure staging that began as early as November 2025. The actor impersonated the Dubai Airports IT department an…

CL-STA-1178 critical infrastructure telecommunications