logo

Microsoft Word - Turla advisory revised

ID: cfb1d456-eeb9-47d4-9df8-52559dec5cc4

STIX ID: report--cfb1d456-eeb9-47d4-9df8-52559dec5cc4

Threat Score

82/100

Uploaded: 2026-08-19

Published Date: 2017-11-23

Last Modified Date: 2017-11-23

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
The NCSC report details Turla's use of Neuron and Nautilus malware with the Snake rootkit to maintain persistent access to targeted networks, primarily Windows mail and web servers, and provides comprehensive analysis of infection vectors, C2 communications, persistence, associated files, and extensive indicators and signatures to aid detection and forensic analysis.