Night Dragon — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
April 22, 2026
Last Seen
July 28, 2026

Night Dragon is an apt_group tracked by ThreatCluster, appearing in 5 threat clusters built from 5 intelligence report mentions.

Night Dragon is a apt_group tracked across 5 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed April 22, 2026; most recent activity July 28, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Analyzing Flying Eagle Android RAT: APK Builder, C2 Panel, Banking Overlays, and a Successor Called Night Dragon — Reddit · July 28, 2026
  • 002 — attack.mitre.org · July 23, 2026
  • External Remote Services — attack.mitre.org · June 3, 2026
  • T1685: Disable or Modify Tools — attack.mitre.org · April 28, 2026
  • T1005 — attack.mitre.org · April 22, 2026

Frequently asked questions

What is Night Dragon?

Night Dragon is an apt_group tracked by ThreatCluster, appearing in 5 threat clusters built from 5 intelligence report mentions.

Is Night Dragon still active?

The most recent intelligence report mentioning Night Dragon on ThreatCluster is dated July 28, 2026. Activity was first observed April 22, 2026, giving a tracked span from then to July 28, 2026.

What is Night Dragon associated with?

Across ThreatCluster reporting, Night Dragon most frequently co-occurs with Agrius, APT1, Apt18, Apt28, Apt29, among 12 tracked related entities.

What are the latest developments involving Night Dragon?

The most significant recent cluster is “MuddyWater Targets U.S. Entities Amid Geopolitical Tensions” (16 articles · Updated July 22, 2026). Night Dragon appears across 5 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Night Dragon?

Night Dragon appears in 5 intelligence report mentions across 5 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown