NightEagle APT Exploits Microsoft Exchange Flaw to Target China’s Military and Tech Sectors
Researchers studying cybersecurity have provided insight on NightEagle, also known as APT-Q-95, a hitherto unknown threat actor that has been seen attacking Microsoft Exchange servers as a component of a zero-day exploit chain intended to target China's defense, government, and technological industries.
The threat actor has been active since 2023 and has rapidly moved network infrastructure, according to QiAnXin's RedDrip Team. CYDES 2025, the third iteration of Malaysia's National Cyber Defence & Security Exhibition and Conference, which took place from July 1 to July 3, 2025, was where the findings were presented.
The cybersecurity provider explained the reasoning behind naming the adversary NightEagle by stating that it appears to have the speed of an eagle and has been worki...