NightEagle targets Russian companies
Kaspersky GERT experts have uncovered a new campaign by the NightEagle APT, featuring the GhostContainer backdoor and tools hosted on GitHub. The group is also exploiting vulnerabilities in Active Directory and RDP.
Read at Securelist (Kaspersky GReAT)
- Vendor
- Microsoft, Kaspersky
- Product
- Active Directory / Entra ID, Remote Desktop, Kaspersky
- Exposure class
- Identity, Remote access, Endpoint security
Why it ranks 28 (Notable)
- Exposed product class: identity, remote access
- Widely deployed vendor product (Microsoft)
- Covered by 2 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Securelist (Kaspersky GReAT) (securelist.com)
- CVE-2020-0688 on this site · NVD · CVE.org · Vulnpedia
- CVE-2019-0708 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.