The Epic Turla Operation - Securelist

The Epic Turla operation is a sophisticated, ongoing cyber-espionage campaign attributed to Turla, employing multi-stage infection via spearphishing and watering holes, along with zero-day and other exploits to install backdoors and a large, resilient command-and-control network; the report documents extensive IOCs, victim distribution, and modular malware families such as WorldCupSec, Cobra, and Carbon, across dozens of countries.