Researchers studying cybersecurity have provided insight on NightEagle, also known as APT-Q-95, a hitherto unknown threat actor that has been seen attacking Microsoft Exchange servers as a component of a zero-day exploit chain intended to target China’s defense, government, and technological industries.
The threat actor has been active since 2023 and has rapidly moved network infrastructure, according to QiAnXin’s RedDrip Team. CYDES 2025, the third iteration of Malaysia’s National Cyber Defence & Security Exhibition and Conference, which took place from July 1 to July 3, 2025, was where the findings were presented.
The cybersecurity provider explained the reasoning behind naming the adversary NightEagle by stating that it appears to have the speed of an eagle and has been working at night in China.
With the primary objective of obtaining intelligence, the threat actor’s attacks have targeted companies involved read more about NightEagle APT Exploits Microsoft Exchange Flaw to Target China’s Military and Tech Sectors.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.