The Russia-linked threat actor known as Turla infected several systems belonging to an unnamed European non-governmental organization (NGO) in order to deploy a backdoor called TinyTurla-NG.
"The attackers compromised the first system, established persistence and added exclusions to antivirus products running on these endpoints as part of their preliminary post-compromise actions," Cisco



Source: TheHackerNews
Source Link: https://thehackernews.com/2024/03/russia-hackers-using-tinyturla-ng-to.html