Security News > 2022 > May > Russian hackers perform reconnaissance against Austria, Estonia
In a new reconnaissance campaign, the Russian state-sponsored hacking group Turla was observed targeting the Austrian Economic Chamber, a NATO platform, and the Baltic Defense College.
This discovery comes from cybersecurity firm Sekoia, which built upon previous findings of Google's TAG, which has been following Russian hackers closely this year.
Sekoia used this information to investigate further and found that Turla targeted the federal organization in Austria and the military college in the Baltic region.
Turla is a Russian-speaking cyber-espionage threat group that is believed to have strong ties to Russian Federation's FSB service.
More recently, Turla was seen using a variety of backdoors and remote access trojans against EU governments and embassies and important research facilities.
The Word file does not contain any malicious macros or behavior, making Sekoia believe that the PNG is used to perform reconnaissance.
News URL
Related news
- Microsoft and DOJ disrupt Russian FSB hackers' attack infrastructure (source)
- 100+ domains seized to stymie Russian Star Blizzard hackers (source)
- Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday (source)
- US, UK warn of Russian APT29 hackers targeting Zimbra, TeamCity servers (source)
- Russian hackers deliver malicious RDP configuration files to thousands (source)
- Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails (source)
- Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across Europe and Asia (source)