Malware
TurlaPower-NG
- First Reported
- Feb 15, 2024
- Latest Reported
- Feb 22, 2024
Reported Context (2)
- is in line with Turla’s usage of multiple variants of malware families including TinyTurla-NG, TurlaPower-NG and other PowerShell-based scripts during this campaign. Turla’s TinyTurla-NG Campaign Used Chisel, Credential Theft Scripts and a Web Shell
- We’ve also discovered previously unknown PowerShell scripts we’re calling “TurlaPower-NG '' that are meant to act as file exfiltrators. TinyTurla-NG deployed these scripts to exfiltrate key material used to secure the Turla Uses TinyTurla-NG Backdoor to Target Polish NGOs and Steal Password-Manager Key Material
Malware (5)
People (4)
Threat Actors (1)
MITRE ATT&CK (10)
Vendors (1)
Products (15)
Tools (2)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.