Mosquito campaign by Turla undergoes significant TTPs shift
ID: 5023207c-2b69-41ee-b494-c3be206c5205
STIX ID: report--5023207c-2b69-41ee-b494-c3be206c5205
Threat Score
78/100
Uploaded: 2026-08-19
Published Date: 2018-05-23
Last Modified Date: 2018-05-23
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
ESET reports on Turla's Mosquito espionage campaign, detailing shifts in tactics such as using Metasploit as a first-stage backdoor, continuing to deliver a fake Flash installer to target embassies and consulates in Eastern Europe, with stages leading to Meterpreter, Mosquito Loader and Backdoor, and culminating in a legitimate Adobe Flash installer download; the report also lists IoCs and potential C2 infrastructure.
