logo

Mosquito campaign by Turla undergoes significant TTPs shift

ID: 5023207c-2b69-41ee-b494-c3be206c5205

STIX ID: report--5023207c-2b69-41ee-b494-c3be206c5205

Threat Score

78/100

Uploaded: 2026-08-19

Published Date: 2018-05-23

Last Modified Date: 2018-05-23

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
ESET reports on Turla's Mosquito espionage campaign, detailing shifts in tactics such as using Metasploit as a first-stage backdoor, continuing to deliver a fake Flash installer to target embassies and consulates in Eastern Europe, with stages leading to Meterpreter, Mosquito Loader and Backdoor, and culminating in a legitimate Adobe Flash installer download; the report also lists IoCs and potential C2 infrastructure.