The Hacker Newsinfo@thehackernews.com (The Hacker News)
Three Threat Groups Target Russian Enterprises With Destructive Malware
Part of the NightEagle story · since 16 Sep
Quiet for 6 weekslast report 21 Sep3 articles3 outlets
- Wed 16 Sep, 10:11 UTC. Securelist, first report. NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access. Cites a CVE in CISA KEV.
- Wed 16 Sep, 16:36 UTC. The Hacker News, its first report on the story. Three Threat Groups Target Russian Enterprises With Destructive Malware. This article, 2nd of 3.
- Mon 21 Sep, 09:13 UTC. SecurityOnline, its first report on the story. NightEagle Hackers Target Russian Firms With GhostContainer Backdoor. Cites a CVE in CISA KEV.
The article discusses the targeting of Russian enterprises by three distinct threat groups employing methods such as backdoors, ransomware, and data wipers. It highlights the growing cybersecurity risks these organizations face and the potential repercussions of such attacks on their operations. The piece emphasizes the importance of robust cybersecurity measures and awareness in safeguarding against these evolving threats.
How the story developed
Quiet for 6 weekslast report 21 Sep3 articles3 outlets
3 articles from 3 outlets since 16 Sep. Quiet since 21 Sep. This was the 2nd report, 6 hours after the first.
- Wed 16 Sep, 10:11 UTC. Securelist, first report. NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access. Cites a CVE in CISA KEV.
- Wed 16 Sep, 16:36 UTC. The Hacker News, its first report on the story. Three Threat Groups Target Russian Enterprises With Destructive Malware. This article, 2nd of 3.
- Mon 21 Sep, 09:13 UTC. SecurityOnline, its first report on the story. NightEagle Hackers Target Russian Firms With GhostContainer Backdoor. Cites a CVE in CISA KEV.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 3 articles as a listHide the list
- Wed 16 SepDay 02
- NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access10:11 · Securelist · First report · Exploited CVE · Known exploited CVE
- Three Threat Groups Target Russian Enterprises With Destructive Malware16:36 · The Hacker News · This article, 2nd of 3
Quiet for 5 days
Mon 21 SepDay 51- NightEagle Hackers Target Russian Firms With GhostContainer Backdoor09:13 · SecurityOnline · Picked up again · Known exploited CVE