Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky.

The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.

guid

https://thehackernews.com/2026/09/three-threat-groups-target-russian.html

source_url

https://thehackernews.com/2026/09/three-threat-groups-target-russian.html

id: 3097
uid: 1BOen
insdate: 2026-09-16 17:10:10
title: Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
additional: Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky.

The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/09/three-threat-groups-target-russian.html
source_url: https://thehackernews.com/2026/09/three-threat-groups-target-russian.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 7 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec