Russia’s Turla APT Abuses MSBuild to Deliver TinyTurla Backdoor

May 21, 2024 at 10:59AM A Russia-linked APT group is deploying the TinyTurla backdoor via a campaign that uses socially engineered emails and fileless payload. The campaign targets individuals and entities in the Philippines, with the TinyTurla backdoor connected to the long-running Russia-sponsored threat actor, Turla. The attackers impersonate legitimate authorities and employ sophisticated techniques … Read more

Turla hackers backdoor NGOs with new TinyTurla-NG malware

February 15, 2024 at 10:03AM Security researchers discovered new malware known as TinyTurla-NG and TurlaPower-NG, being used by the Russian hacker group Turla. The group exploits vulnerable WordPress websites for command and control purposes. Targeting organizations across various sectors, they aim to steal sensitive data using custom tools and malware. The malware’s purpose is to … Read more