Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan

Cisco Talos assesses with high confidence that YoroTrooper, an espionage-focused threat actor first active in June 2022, likely consists of individuals from Kazakhstan based on their use of Kazakh currency and fluency in Kazakh and Russian.

actor apt attacks azerbaijan cisco cisco talos currency espionage high june kazakhstan landing page top story malware origin russian securex talos threat threat actor top story yorotrooper