Russia’s Turla APT Deploys STOCKSTAY Backdoor Against Ukrainian Government and Military Targets
Russia-linked Turla (FSB Center 16) has been running a long-running espionage campaign deploying a new .NET backdoor called STOCKSTAY against Ukrainian government and military organizations since December 2022. Google Threat Intelligence Group has published detailed research revealing STOCKSTAY’s three-component architecture, use of compromised Ukrainian infrastructure for delivery, and deep technical overlaps with Turla’s KAZUAR toolkit.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.