Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Russian enterprises are being targeted by three threat groups, known as NightEagle, Hacking Cat, and Toy Ghouls. These groups are using backdoors, ransomware, and wipers in their attacks. Kaspersky has identified the activities of these threat groups and provided reports on them. NightEagle, also known as APT-Q-95, has been active since at least 2023 and has developed new techniques for persistence and lateral movement in its attacks. The threat groups' activities have been tracked by Kaspersky, which has been monitoring their behavior. The attacks are part of a larger campaign targeting Russian enterprises.