Tracking Turla

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in T2 2022

ESET researchers discover a new backdoor used by Turla to exfiltrate stolen documents to Dropbox

Turla has updated its ComRAT backdoor and now uses the Gmail web interface for Command and Control

A view of the Q1 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts

Can an old APT learn new tricks? Turla’s TTPs are largely unchanged, but the group recently added a Python backdoor.

ESET researchers analyze new TTPs attributed to the Turla group that leverage PowerShell to run malware in-memory only

ESET research uncovers Microsoft Exchange malware remotely controlled via steganographic PDF and JPG email attachments

ESET research offers a rare glimpse into the mechanics of a particularly stealthy and resilient backdoor that the Turla cyberespionage group can fully control via PDF files attached to emails

ESET researchers have observed a significant change in the campaign of the infamous espionage group