Back to Feed
MalwareJun 9, 2026

‼️ Nightmare Eclipse is back on GitHub under a new alias and has released a new Windows Defender...

Nightmare Eclipse resurfaces on GitHub with a new alias and a Windows Defender zero-day.

Summary

The threat actor known as Nightmare Eclipse has reappeared on GitHub under a new alias. They have also released a new zero-day vulnerability targeting Windows Defender, dubbed RoguePlanet. Proof-of-concept details and the new GitHub repository have been shared.

Indicators of Compromise

  • url — https://t.co/qwU93VedpH
  • url — https://t.co/n0xF6uGt4u

Entities

Nightmare Eclipse (threat_actor)Windows Defender (product)GitHub (technology)