Russian APT Turla Wields Novel Backdoor Malware Against Polish NGOs

Russia-linked APT group Turla is conducting a targeted cyberespionage campaign against Polish NGOs supporting Ukraine, deploying a new modular service-DLL backdoor called TinyTurla-NG and a PowerShell exfiltration implant (TurlaPower-NG) to harvest credential databases and exfiltrate files; compromised WordPress sites are used as C2 infrastructure and Cisco Talos published IoCs and mitigation recommendations.