NightEagle, also tracked as APT-Q-95 and APT-C-78, is a highly sophisticated and well-funded cyberespionage group publicly disclosed in July 2025, with operations dating back to at least 2023. The group is assessed with high confidence to originate from North America, specifically the US West Coast, based on its fixed operational schedule aligning with that timezone. Its primary motivation is intelligence theft, focusing on strategic industries and government entities in China, including high-tech, semiconductor manufacturing, quantum technology, artificial intelligence, and military sectors. NightEagle distinguishes itself through its ultra-fast switching of network infrastructure, extensive use of dedicated, disposable C2 domains, and reliance on suspected zero-day exploits in Microsoft Exchange servers to maintain stealthy, long-term access.

Aliases del actor

APT-Q-95

Actores similares

apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1apt-c-48actor · 1