Turla/Belugasturgeon Compromises Government

Turla/Belugasturgeon Compromises Government | Accenture

By Accenture Cyber Threat Intelligence

Turla, identified internally by Accenture Cyber Threat Intelligence as Belugasturgeon, continues to target government organizations using custom malware, including updated legacy tools, designed to maintain persistence through overlapping backdoor access while evading their victim’s defenses. One such tool, the HyperStack backdoor (named after its filename on one identified sample), has seen significant updates that appear to be inspired by the group’s Carbon backdoor and the RPC backdoor described by ESET researchers.

Turla has conducted espionage operations on behalf of its state sponsor for over a decade. The group primarily targets foreign governmen…