// Turla + Gamaredon : alliance inédite entre APT russes
⚠️ Deux groupes APT liés au Kremlin, Turla et Gamaredon, collaborent pour la première fois en Ukraine. Une synergie inquiétante entre cyber-espionnage et sabotage.
🔗 https://www.datasecuritybreach.fr/turla-et-gamaredon-la-collaboration-inedite-de-deux-apt-russes/
#APT #CyberEspionnage #Turla #Gamaredon #Ukraine #zataz @Damien_Bancal
#ESET uncovers #Gamaredon–#Turla collaboration in #Ukraine cyberattacks
https://securityaffairs.com/182404/apt/eset-uncovers-gamaredon-turla-collaboration-in-ukraine-cyberattacks.html
#securityaffairs #hacking
Two of the Kremlin’s most active hack groups are collaborating, ESET says https://arstechni.ca/NMLz #advancedpersistentthreat #gamaredon #Security #Biz&IT #russia #turla #APT
Russia uses domestic ISPs to spy on diplomats, warns Microsoft
https://www.databreachtoday.com/russia-uses-isps-to-spy-on-diplomats-warns-microsoft-a-29113 #SecretBlizzard #Turla
The Kremlin's Most Devious #Hacking Group Is Using #Russian ISPs to Plant #Spyware
The #FSB #cyberespionage group known as #Turla seems to have used its control of Russia's network #infrastructure to meddle with web traffic and trick #diplomats into #infecting their computers.
#russia #kremlin #isp
https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/
🇷🇺 Selon #Microsoft, le groupe de hackers #Turla lié au FSB auraient exploité les FAI russes pour installer un faux "update" dans les ambassades de Moscou, désactivant le chiffrement des communications. #cyber https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/
Microsoft found #Turla, 🇷🇺 elite FSB #cyberespionage group, hacking foreign embassies' staff in Moscow by directly meddling with ISP traffic to infect targets with #spyware that silently stripped away encryption on their communications & credentials.
🔗 https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/
Microsoft: Russian State Hackers Are Spying on Embassies via ISP-Level Attacks
#CyberSecurity #Russia #Microsoft #Hacking #FSB #Turla #ThreatIntel
Russia’s FSB-linked hacking group Turla exploits Russian ISPs to implant spyware on diplomats' devices in Moscow, hijacking internet traffic to steal sensitive data. A new espionage tactic blurs the line between surveillance and intrusion. Full story 👇🕵️♂️🌐 #CyberEspionage #Turla #FSB #CyberSecurity #newz
https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/
זה באמת סיפור נחמד: קבוצת התקיפה הרוסית #Turla השתלטה על רשת של קבוצת תקיפה פקיסטנית (Storm-0156), והשתמשה בתשתית שלה כדי להפיץ רושעות, רוגלות ושאר קוקיות משל עצמה לקורבנות בהודו, אפגניסטאן.
https://blog.lumen.com/snowblind-the-invisible-hand-of-secret-blizzard/
#AttributionWars #Cyber
The Russian APT Tool Matrix
#CozyBear #FancyBear #BerserkBear #EMBERBEAR #Sandworm #Gamaredon #Turla
https://blog.bushidotoken.net/2024/09/the-russian-apt-tool-matrix.html
To the Moon and back(doors): Lunar landing in diplomatic missions
#Turla #LunarWeb #LunarMail
https://www.welivesecurity.com/en/eset-research/moon-backdoors-lunar-landing-diplomatic-missions/
#Turla #APT used two new backdoors to infiltrate a European ministry of foreign affairs
https://securityaffairs.com/163314/apt/turla-apt-new-backdoors.html
#securityaffairs #hacking #malware
EclecticIQ reports that Russia-based Turla APT group recently targeted an organization in Albania in a failed attempt to install a backdoor as part of a wider cyberespionage campaign. Turla is publicly attributed to Russian Federal Security Service (FSB) Center 16 by the U.S. government. IOC are provided and analyzed. 🔗 https://blog.eclecticiq.com/turla-apt-targets-albania-with-backdooor-in-ongoing-campaign-to-breach-european-organizations
New details on TinyTurla’s post-compromise activity reveal full kill chain - Cisco Talos is providing an update on its two recent reports on a new and ongoing ... https://blog.talosintelligence.com/tinyturla-full-kill-chain/ #landingpagetopstory #topstory #malware #securex #turla #apt
Cisco Talos provides an update on an ongoing campaign operated by the Russian state-sponsored APT Turla (publicly attributed to Federal Security Service of the Russian Federation (FSB) Center 16). They now have new information on the entire kill chain this actor uses, including the tactics, techniques and procedures (TTPs) utilized to steal valuable information from their victims and propagate through their infected enterprises. IOC provided. 🔗 https://blog.talosintelligence.com/tinyturla-full-kill-chain/
#Russia #cyberespionage #Turla #FSB #TinyTurla #threatintel #IOC
We released more details this morning on the #Turla activity we're actively tracking, including new information about its command and control and various payloads https://blog.talosintelligence.com/tinyturla-ng-tooling-and-c2/
Rosyjska grupa atakuje polskie organizacje pozarządowe
Wybuch konfliktu na Ukrainie to nie tylko działania kinetyczne. W cyberprzestrzeni obserwować możemy wzmożoną działalność grup, zwłaszcza tych rosyjskich. Oprócz oczywistych celów, jakimi są infrastruktury wojskowe i krytyczne, operacje grup powiązanych z rosyjskim rządem skierowane są przeciwko organizacjom wspierającym Ukrainę. Cisco Talos opisuje ślady grupy Turla (znanej też jako ATK13,...
#WBiegu #Apt #Cisco #Rosja #Talos #Turla
https://sekurak.pl/rosyjska-grupa-atakuje-polskie-organizacje-pozarzadowe/
#Russia-linked #Turla #APT uses new TinyTurla-NG #backdoor to spy on Polish NGOs
https://securityaffairs.com/159208/apt/turla-apt-tinyturla-ng-backdoor.html
#securityaffairs #hacking
What a week for Poland. First they announce authorities in the previous government illegally used Pegasus spyware. Now Turla is spying on Polish NGOs.
https://blog.talosintelligence.com/tinyturla-next-generation/
#APT #Turla #ThreatIntel #NSOgroup
