Microsoft Exchange servers compromised by Turla APT

Turla has been targeting defense sector organizations in Ukraine and Eastern Europe with DeliveryCheck and Kazuar backdoors / infostealers and has been using compromised Microsoft Exchange servers to control them. Turla APT Turla (aka Secret Blizzard, Snake, UAC-0003) is a sophisticated and persistent APT group that has been active for over 10 years and is believed to be sponsored by the Russian state. The group is linked to many cyberattacks targeting government and military organizations, … More →

The post …

apt backdoor backdoors blizzard compromised control cyber espionage data theft defense defense sector don't miss eastern europe europe exchange hot stuff infostealers microsoft microsoft exchange organizations persistent secret sector servers snake targeting turla uac ukraine