Cybersecurity analysts have unveiled a previously unreported threat entity known as NightEagle (also referred to as APT-Q-95), which has been detected aiming at Microsoft Exchange servers as part of a zero-day exploit sequence aimed at government, defense, and technology industries in China.

As per QiAnXin’s RedDrip Team, this threat entity has been operational since 2023 and has altered its network strategies.