Turla Updates Kazuar Backdoor with Advanced Anti-Analysis to Evade Detection

The Russia-linked hacking crew known as Turla has been observed using an updated version of a known second-stage backdoor referred to as Kazuar.
The new findings come from Palo Alto Networks Unit 42, which is tracking the adversary under its constellation-themed moniker Pensive Ursa.
"As the code of the upgraded revision of Kazuar reveals, the authors put special emphasis on Kazuar's ability to

advanced adversary alto analysis anti-analysis backdoor code constellation detection evade findings hacking kazuar networks palo palo alto palo alto networks pensive ursa russia stage tracking turla under unit 42 updates version