Chinese cybersecurity powerhouse Qi An Xin recently made a significant disclosure at the CYDES 2025″ International Defense Cyber Security Exhibition in Putrajaya, revealing a new Advanced Persistent Threat (APT) group dubbed “NightEagle” (Code: APT-Q-95).
Discovered in early 2024 during a network defense operation, this sophisticated group primarily targets critical networks across governments, enterprises, military, healthcare, scientific research, and information infrastructure. Their attacks are characterized by their persistence, precision, stealth, and severe destructive capabilities. According to Qi An Xin spokesperson Gu Liang, the NightEagle APT group employs the most advanced, malicious and complex attack software to continuously exploit existing vulnerabilities in various national and regional network systems, causing irreparable damage.
Of particular concern is the NightEagle APT group’s highly organized structure, hinting at support from national entities, governments, or powerful financial groups, which enables them to pursue clear objectives. They are known for long-term infiltration into target systems silently monitoring, stealing sensitive information, and executing other destructive acts. At the exhibition, Qi An Xin specifically highlighted the group’s exploitation of high-risk Microsoft Exchange system vulnerabilities for intrusions, confirming they captured the entire procession attackers leveraging these vulnerabilities for remote code execution. This makes NightEagle one of the most dangerous and highly active APT threats currently, demanding global vigilance and robust defense strategies.
Tags: NightEagle, qianxin, Exchange, North America
