Talos uncovers espionage campaigns targeting CIS countries, Turkey, and European institutions including Embassies and a critical EU Health care Agency

By Asheer Malhotra and Vitor Ventura.

• Cisco Talos has identified a new threat actor, which we are naming “YoroTrooper,” that has been running several successful espionage campaigns since at least June 2022.
  
  


• YoroTrooper’s main targets are government or energy organizations in Azerbaijan, Tajikistan, Kyrgyzstan and other Commonwealth of Independent States (CIS), based on our analysis. We also observed YoroTrooper compromise accounts from at least two international organizations: a critical European Union (EU) health care agency and the World Intellectual …

actor agency analysis asheer malhotra campaigns care cis cisco cisco talos compromise countries critical energy espionage government health health care institutions june kyrgyzstan main organizations states talos targeting threat threat actor turkey ventura yorotrooper