Turla__2019__ESET-LightNeuron.pdf

Threat intelligence on Turla's LightNeuron malware, a sophisticated Exchange Transport Agent backdoor that intercepts and manipulates emails, exfiltrates data via C2 channels using steganographically embedded attachments, provides a remote command capability, and is tied to a long-running Turla campaign with detailed artifacts, indicators, and mitigations.