Threat actor
Turla
Tracked by CyberSIXT since May 14, 2026 · last activity Jun 30, 2026
Linked incidents
Associated CVEs
Coverage timeline
-
STOCKSTAY malware hits Ukraine, Italy via phishing RDP exploitssecurityonline.info · Jun 30, 2026
-
Linux kernel bugs and AI malware spur Turla backdoor surgethehackernews.com · Jun 29, 2026
-
Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targetswww.securityweek.com · Jun 26, 2026
-
Google uncovers Turla's STOCKSTAY backdoor targeting Ukrainethehackernews.com · Jun 26, 2026
-
Google flags Turla’s STOCKSTAY backdoor aimed at Ukraine, Europecloud.google.com · Jun 25, 2026
-
Pwn2Own Berlin 2026 crowns champion with $1.3 million prizesecurityaffairs.com · May 17, 2026
-
Turla’s Kazuar backdoor now powers stealthy peer to peer botnetthehackernews.com · May 15, 2026
-
Secret Blizzard’s Kazuar malware hits govts with P2P botnetwww.microsoft.com · May 14, 2026