The ‘Penquin’ Turla - Securelist
ID: 1e3dc3c9-ab1e-439a-a152-123f68e182d8
STIX ID: report--1e3dc3c9-ab1e-439a-a152-123f68e182d8
Threat Score
70/100
Uploaded: 2026-08-19
Published Date: 2014-12-09
Last Modified Date: 2014-12-09
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
The report describes a Linux variant of the Turla backdoor attributed to the Turla APT, detailing a statically linked ELF malware that performs hidden remote commands via a PCAP/C2 mechanism and uses a hardcoded domain for control, with accompanying indicators and references to related Turla campaigns and research.