Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies

Sea Turtle (aka Cosmic Wolf/Marbled Dust/Teal Kurma/UNC1326) is conducting a stealthy, espionage-focused campaign targeting telecoms, ISPs, IT providers and Kurdish sites—leveraging DNS hijacking, supply-chain/island-hopping techniques and a Linux/Unix reverse shell called SnappyTCP to harvest credentials, copy email archives to public web directories, and exfiltrate politically motivated information for intelligence/surveillance purposes.