NightEagle targets Russian companies
MentionsGitHubKasperskyMicrosoftActive Directory
Kaspersky GERT experts have uncovered a new campaign by the NightEagle APT, featuring the GhostContainer backdoor and tools hosted on GitHub. The group is also exploiting vulnerabilities in Active Directory and RDP.
Summary from Kaspersky Securelist.
Explained
The technology and terms in this story. Learn more
- ConceptAPT · Advanced persistent threatA well-resourced hacking group, usually tied to a government, that runs long, targeted campaigns.
- AttackBackdoorA hidden way back into a system that bypasses normal logins.
- TechnologyActive DirectoryMicrosoft's directory of users, computers and permissions that most corporate Windows networks are built on.
- ProtocolRDP · Remote Desktop ProtocolMicrosoft's protocol for controlling a Windows machine's desktop over the network.