Toy Ghouls

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Kaspersky has identified three threat activity clusters—NightEagle (APT-Q-95), Hacking Cat, and Toy Ghouls—targeting Russian enterprises. The campaigns involve backdoors, ransomware, and wipers, with NightEagle employing new persistence and lateral movement techniques. Specific victims and scale remain undisclosed.