NightEagle APT targets Russian organizations | Securelist

The NightEagle APT group has expanded its operations into Russia, leveraging compromised credentials, sophisticated backdoors like GhostContainer, and legitimate tunneling tools to stealthily persist, move laterally, and compromise entire Active Directory infrastructures while evading detection.