Turla__2018__blog_1.pdf

ESET reports that Turla has expanded its toolkit with a backdoor-laced Flash Player installer used in campaigns against embassies and consulates in post-Soviet states, relying on social engineering and spoofed Adobe infrastructure to drop backdoors and exfiltrate data from victims, including credentials and device information, while establishing persistence and using encryption to hide activity.