MalwareJun 9, 2026
‼️ Nightmare Eclipse is back on GitHub under a new alias and has released a new Windows Defender...
Nightmare Eclipse resurfaces on GitHub with a new alias and a Windows Defender zero-day.
Summary
The threat actor known as Nightmare Eclipse has reappeared on GitHub under a new alias. They have also released a new zero-day vulnerability targeting Windows Defender, dubbed RoguePlanet. Proof-of-concept details and the new GitHub repository have been shared.
Indicators of Compromise
- url — https://t.co/qwU93VedpH
- url — https://t.co/n0xF6uGt4u
Entities
Nightmare Eclipse (threat_actor)Windows Defender (product)GitHub (technology)