Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Nightmare-Eclipse Zero-Days Hit CrowdStrike, NVIDIA, Avast & More
Threat Actors
Malware Families
Excerpt
Key Findings Nightmare-Eclipse has shifted targets. Every prior release from this persona, from BlueHammer in April 2026 through ShieldBreak in August 2026, targeted Microsoft Defender, BitLocker, or another native Windows component. This batch targets the third-party security and driver software organizations layer on top of Windows: CrowdStrike Falcon, NVIDIA GPU drivers, Gen Digital Avast Antivirus, and Kaspersky Endpoint Security. Four zero-day proof-of-concept exploits…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(2)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | git.projectnightcrawler.dev | High | Score 68/100 | First seen |
| Domain | git.churchofmalware.org | High | Score 68/100 | First seen |
IOC Relationship Graph
Building graph…