Night Dragon is a cyber espionage group that first emerged with documented activity starting in November 2009, although some reports suggest initial attacks may have begun as early as 2007 or 2008. The group is assessed to originate primarily from China, with command and control servers traced to Heze City, Shandong Province. Their primary motivation is cyber espionage, specifically targeting sensitive proprietary operations and project-financing information, often including data from SCADA systems, related to oil and gas field bids and operations. Night Dragon is notable for being one of the first publicly disclosed nation-state-level cyberattacks that targeted the energy sector extensively, impacting numerous global organizations. The group is also tracked under the MITRE ATT&CK identifier G0014.