HOMETHREATSNightEagle
APT / THREAT GROUP🕵️ ESPIONAGE

NightEagle

🇺🇸United States-attributed
1
campaigns
2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

NightEagle is an advanced Threat Actor that targeted China's High-Tech Industry and Military Organisation, leveraging sophisticated techniques, 0 days, and specialized detection avoiding malware. The threat actor seems to have access to significant funding, with dedicated infrastructure, and focuses on low-noise, low-impact intelligence gathering operations. NightEagle is identified as a North-American, state-sponsored or affiliated group that has been active since at least 2023.

Threat Analysis

NightEagle is a known-sophistication threat actor attributed to United States, engaged in cyber operations with a primary motivation of espionage.

The group's espionage-oriented operations suggest a state-sponsored or state-aligned mandate, typically focused on stealing intellectual property, government secrets, or military intelligence. Targets are usually selected for strategic value rather than financial gain.

Known Campaigns

NightEagle — Active Operations March 2026

NightEagle is a unknown-motivation threat actor attributed to United States. NightEagle is an advanced Threat Actor that targeted China's High-Tech Industry and Military Organisation, leveraging sophisticated techniques, 0 days, and specialized detection avoiding malware. The threat actor seems to have access to significant funding, with dedicated infrast...

ACTIVEMEDIUM2026

External References

Quick Facts

TypeAPT / Threat Group
Motivation🕵️ espionage
Origin🇺🇸 United States
Aliases2
SourceMalpedia

Also Known As

APT-Q-95NightEagle

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
NightEagle — APT / Threat Group | Threat Intelligence | CTIWATCH.COM