Microsoft Word - Turla advisory revised
ID: cfb1d456-eeb9-47d4-9df8-52559dec5cc4
STIX ID: report--cfb1d456-eeb9-47d4-9df8-52559dec5cc4
Threat Score
82/100
Uploaded: 2026-08-19
Published Date: 2017-11-23
Last Modified Date: 2017-11-23
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
The NCSC report details Turla's use of Neuron and Nautilus malware with the Snake rootkit to maintain persistent access to targeted networks, primarily Windows mail and web servers, and provides comprehensive analysis of infection vectors, C2 communications, persistence, associated files, and extensive indicators and signatures to aid detection and forensic analysis.
