🐻 I wanted to learn more about the Russian APT group codenamed Turla, so I turned to my source at ESET, Tony Anscombe, to answer a few questions.

Sources:
🔐 DAGMA IT Security
https://dagma.eu/en

🤝 Gamaredon X Turla collab
https://www.welivesecurity.com/en/eset-research/gamaredon-x-turla-collab/

🕵️‍♀️ ESET APT Activity Report Q2 2025–Q3 2025
https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q2-2025-q3-2025/

🇮🇷 Iran-aligned BladedFeline spies on Iraqi and Kurdish officials, ESET Research discovers
https://www.eset.com/us/about/newsroom/research/iran-aligned-bladedfeline-spies-on-iraqi-and-kurdish-officials-eset-research-discovers/

Relevant xkcd: https://xkcd.com/1330/

© All trademarks, logos and brand names are the property of their respective owners.
All company, product and service names used in this website are for identification purposes only.
Use of these names, trademarks and brands does not imply endorsement.

My socials:
Instagram @mattchrobok https://www.instagram.com/mattchrobok/
Twixxer @ChrobokMatt https://twitter.com/ChrobokMatt
Mastodon https://infosec.exchange/@mateuszchrobok
LinkedIn @mateuszchrobok https://www.linkedin.com/in/mateuszchrobok/
TikTok @matt.chrobok
Facebook https://www.facebook.com/mattchrobok

Chapters:
00:00 Intro
01:26 Turla
02:38 Attribution
03:49 Kazuar
05:12 Collaboration
07:52 Examples
10:36 Evolution
12:10 Automation
13:22 Goals
17:03 Disaster
20:09 Recruitment
20:46 Monetisation
21:50 Marketplace
23:31 Differences
26:15 The End

#Turla #Gamaredon #ESET #APT #cybersecurity