NightEagle (APT-Q-95) is a US-origin state-sponsored threat actor targeting China's strategic sectors with advanced evasion tactics.
Analyst brief
NightEagle (APT-Q-95) is a US-origin, state-sponsored advanced threat actor. It primarily targets China's military, government, technology, and private sectors. The group leverages 0-days, specialized detection-evading malware, and low-noise intelligence gathering techniques. Defenders should focus on strengthening network segmentation and hunting for low-and-slow data exfiltration indicators to counter these advanced evasion tactics.
NightEagle
APT-Q-95
nation-state
NightEagle is an advanced Threat Actor that targeted China's High-Tech Industry and Military Organisation, leveraging sophisticated techniques, 0 days, and specialized detection avoiding malware. The threat actor seems to have access to significant funding, with dedicated infrastructure, and focuses on low-noise, low-impact intelligence gathering operations. NightEagle is identified as a North-American, state-sponsored or affiliated group that has been active since at least 2023.