🐻 I wanted to learn more about the Russian APT group codenamed Turla, so I turned to my source at ESET, Tony Anscombe, to answer a few questions.

Sources:

🔐 DAGMA IT Security

https://dagma.eu/en

🤝 Gamaredon X Turla collab

https://www.welivesecurity.com/en/eset-research/gamaredon-x-turla-collab/

🕵️‍♀️ ESET APT Activity Report Q2 2025–Q3 2025

https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q2-2025-q3-2025/

🇮🇷 Iran-aligned BladedFeline spies on Iraqi and Kurdish officials, ESET Research discovers

https://www.eset.com/us/about/newsroom/research/iran-aligned-bladedfeline-spies-on-iraqi-and-kurdish-officials-eset-research-discovers/

Relevant xkcd: https://xkcd.com/1330/

© All trademarks, logos and brand names are the property of their respective owners.

All company, product and service names used in this website are for identification purposes only.

Use of these names, trademarks and brands does not imply endorsement.

My socials:

Instagram @mattchrobok https://www.instagram.com/mattchrobok/

Twixxer @ChrobokMatt https://twitter.com/ChrobokMatt

Mastodon https://infosec.exchange/@mateuszchrobok

LinkedIn @mateuszchrobok https://www.linkedin.com/in/mateuszchrobok/

TikTok @matt.chrobok

Facebook https://www.facebook.com/mattchrobok

Chapters:

00:00 Intro

01:26 Turla

02:38 Attribution

03:49 Kazuar

05:12 Collaboration

07:52 Examples

10:36 Evolution

12:10 Automation

13:22 Goals

17:03 Disaster

20:09 Recruitment

20:46 Monetisation

21:50 Marketplace

23:31 Differences

26:15 The End

#Turla #Gamaredon #ESET #APT #cybersecurity