threat actor

Turla

unknownentity:threat_actor

A 2014 Guardian article described Turla as: 'Dubbed the Turla hackers, initial intelligence had indicated western powers were key targets, but it was later determined embassies for Eastern Bloc nations were of more interest. Embassies in Belgium, Ukraine, China, Jordan, Greece, Kazakhstan, Armenia, Poland, and Germany were all attacked, though researchers from Kaspersky Lab and Symantec could not confirm which countries were the true targets. In one case from May 2012, the office of the prime mi

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: turla
kind: threat actor
status: unknown
aliases: ATK13 · BELUGASTURGEON · Blue Python · G0010 · Group 88 · Hippo Team · IRON HUNTER · ITG12 · Krypton · KRYPTON · MAKERSMARK · Pacifier APT · Pfinet · Popeye · Secret Blizzard · SIG23 · Snake · SUMMIT · TAG_0530 · TURLA RELIC · UAC-0003 · UAC-0024 · UAC-0144 · UNC4210 · Uroburos · Venomous Bear · VENOMOUS Bear · Waterbug · WhiteBear · WRAITH
jurisdictions: —
claims naming it: 0 · 0 attributions · 17 relations · 0 events

Identifiers

attack G0010via mitre-attack
misp-galaxy 822b3254-d715-46bc-8011-c5b647d314dcvia misp-galaxy-ransomware
misp-galaxy fa80877c-f509-4daf-8b62-20aba1635f68via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatTurlausesComRAT
fetch —sha256 dc1639caa5501d72
rel_345btcintel:relations:345@v1 sha256:999581e77188d0f2
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesMosquito
fetch —sha256 dc1639caa5501d72
rel_346btcintel:relations:346@v1 sha256:1dcaad4a684f60ae
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesKOPILUWAK
fetch —sha256 dc1639caa5501d72
rel_347btcintel:relations:347@v1 sha256:68a9ee09f2e5053b
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesLunarWeb
fetch —sha256 dc1639caa5501d72
rel_348btcintel:relations:348@v1 sha256:a12997dd89f9d855
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesCrutch
fetch —sha256 dc1639caa5501d72
rel_349btcintel:relations:349@v1 sha256:b5d7a14b02052d1e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesUroburos
fetch —sha256 dc1639caa5501d72
rel_350btcintel:relations:350@v1 sha256:6e563dd9ae2914b7
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesPowerStallion
fetch —sha256 dc1639caa5501d72
rel_351btcintel:relations:351@v1 sha256:5c85b543614d3a79
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesGazer
fetch —sha256 dc1639caa5501d72
rel_352btcintel:relations:352@v1 sha256:18843fa63ea89e0a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesKazuar
fetch —sha256 dc1639caa5501d72
rel_353btcintel:relations:353@v1 sha256:a8d234122d4ab761
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesLightNeuron
fetch —sha256 dc1639caa5501d72
rel_354btcintel:relations:354@v1 sha256:23381947564ae574
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesCarbon
fetch —sha256 dc1639caa5501d72
rel_355btcintel:relations:355@v1 sha256:0c82fa32b1613c0a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesLunarMail
fetch —sha256 dc1639caa5501d72
rel_356btcintel:relations:356@v1 sha256:8564eb23e9673337
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesHyperStack
fetch —sha256 dc1639caa5501d72
rel_357btcintel:relations:357@v1 sha256:38b2ea698723674b
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesEpic
fetch —sha256 dc1639caa5501d72
rel_358btcintel:relations:358@v1 sha256:3790fe378c9590a3
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesTinyTurla
fetch —sha256 dc1639caa5501d72
rel_359btcintel:relations:359@v1 sha256:9e82073c94aad124
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesPenquin
fetch —sha256 dc1639caa5501d72
rel_360btcintel:relations:360@v1 sha256:277671be528477a8
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatTurlausesLunarLoader
fetch —sha256 dc1639caa5501d72
rel_361btcintel:relations:361@v1 sha256:3da95f0856eced51
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.