Skip to content

CyberSIXT Search

Threat actor · coverage timeline

Turla

10 articles from 7 outlets between 14 May and 26 Sep. First reported by Microsoft. The busiest day was Fri 26 Jun, with 2 articles.

Articles: 10; all time · from 7 outlets
Days with coverage: 9; across 136 days
Busiest day: 2; articles on Fri 26 Jun
Last 7 days: 0a day; vs 0.1 a day before
First report: 14 May; Microsoft
CVEs named: 1; 1 in CISA KEV · in these articles

Coverage over time

10 articles · 14 May – 26 Sep

14 MayFirst report14 May · Microsoft

Show as table

Turla: articles per day
Day (UTC)	Articles	Outlets
Thu 14 May	1	Microsoft 1
Fri 15 May	1	The Hacker News 1
Sun 17 May	1	Security Affairs 1
Thu 25 Jun	1	Google Cloud 1
Fri 26 Jun	2	The Hacker News 1, SecurityWeek 1
Mon 29 Jun	1	The Hacker News 1
Tue 30 Jun	1	SecurityOnline 1
Wed 23 Sep	1	Infosecurity 1
Sat 26 Sep	1	SecurityWeek 1

Articles

10 articles

Sat 26 Sep1 article

12:30
New x47.c Botnet Drains Victims’ AI Credits Through API AbuseSecurityWeek

Wed 23 Sep1 article

14:38
New Windows Botnet Targets Victims’ AI Credits in ‘Denial-of-Wallet’ AttacksInfosecurity

Tue 30 Jun1 article

08:21
STOCKSTAY malware hits Ukraine, Italy via phishing RDP exploitsSecurityOnline

Mon 29 Jun1 article

15:01
Linux kernel bugs and AI malware spur Turla backdoor surgeThe Hacker News

Fri 26 Jun2 articles

09:10
Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian TargetsSecurityWeek
08:32
Google uncovers Turla's STOCKSTAY backdoor targeting UkraineThe Hacker News

Thu 25 Jun1 article

15:32
Google flags Turla’s STOCKSTAY backdoor aimed at Ukraine, EuropeGoogle Cloud

Sun 17 May1 article

13:41
Pwn2Own Berlin 2026 crowns champion with $1.3 million prizeSecurity Affairs

Fri 15 May1 article

17:50
Turla’s Kazuar backdoor now powers stealthy peer to peer botnetThe Hacker News

Thu 14 May1 article

15:10
Secret Blizzard’s Kazuar malware hits govts with P2P botnetMicrosoft · first report