Turla Uses Old Malware Infrastructure to Attack Ukrainian Institutions

Turla Russian espionage group delivers KOPILUWAK reconnaissance utility and QUIETCANARY backdoor to ANDROMEDA malware victims in Ukraine. Cyber researchers track the operation as UNC4210. Turla is also known as Iron Hunter, Krypton, Uroburos, Venomous Bear, or Waterbug and is thought to be sponsored by the Russian state. The malicious group`s principal targets are governmental, diplomatic, […]

The post Turla Uses Old Malware Infrastructure to Attack Ukrainian Institutions appeared first on Heimdal Security Blog.

attack backdoor bear cyber cybersecurity news espionage hunter infrastructure institutions iron malicious malware old reconnaissance researchers russian sponsored state thought turla ukraine ukrainian utility