NightEagle
NightEagle is classified as state-sponsored.
- Suspected state sponsor
- United States
- Also known as
- 1
NightEagle is an advanced Threat Actor that targeted China's High-Tech Industry and Military Organisation, leveraging sophisticated techniques, 0 days, and specialized detection avoiding malware. The threat actor seems to have access to significant funding, with dedicated infrastructure, and focuses on low-noise, low-impact intelligence gathering operations. NightEagle is identified as a North-American, state-sponsored or affiliated group that has been active since at least 2023.
The group is suspected of operating with the support of United States.
Also known as: APT-Q-95
Published reports on this actor:
- https://www.authentic8.com/blog/cyber-intel-brief-nighteagle-apt-ai-deepfakes-spnego-flaw
- https://thehackernews.com/2025/07/nighteagle-apt-exploits-microsoft.html
- https://cybersecuritynews.com/nighteagle-apt-exploiting-0-days/
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.