Cyber Threat Report: 'TinyTurla Next Generation - Turla APT spies on Polish NGOs'

Report Author Cisco Talos
Publication Date 2024-02-15
Original Reporting Source
Attributed to Nation Russia
Related Intrusion Sets Turla
Victim Sectors Non Profit

'TinyTurla-NG' is a backdoor identified by Cisco Talos researchers which shows similarities to a previously used implant 'TinyTurla' - both used by the Russian intrusion set Turla. The report describes TinyTurl-NG as a small, leave behind backdoor intended to provide access back into a victim if other accesses have failed or been remediated. The implant was seen used against a Polish NGO in December 2023 who were working to support Polish democracy and aid Ukraine.

Cyber Threat Graph Context

Explore how this report relates to the wider threat graph