NewsPenguin is a cyber espionage threat actor first publicly identified in February 2023, although concrete evidence suggests their operational activities, including domain registrations for a targeted campaign, commenced by at least June 2022. The group's primary motivation is cyber espionage and the illicit acquisition of sensitive information, specifically targeting military and marine technologies. NewsPenguin is distinguished by its meticulous preparatory efforts, demonstrated through advance domain registrations and a consistent refinement of their infiltration toolsets. They have not been associated with other known threat actor aliases, and initial reporting established them as a previously unknown entity, clearly differentiating them from other established groups. NewsPenguin's operations have predominantly focused on entities within Pakistan's military-industrial complex.