New Turla Backdoor Variant Targets High-Profile Organizations

• •ESET's report reveals a new variant of the Turla backdoor using PDF attachments for C&C.
• •High-profile victims include Germany's Federal Foreign Office, compromised since 2017.
• •Turla APT has a long history of targeting government and private sectors with sophisticated malware.

ESET researchers have reported on a new variant of the Turla backdoor, utilized by the Russia-linked APT group in targeted espionage campaigns. This variant employs PDF email attachments for command and control (C&C) communications. The analysis revealed previously unknown high-profile victims, including Germany's Federal Foreign Office, which was compromised in 2017. The Turla group has a history of targeting government entities and private businesses, with a sophisticated arsenal of malware tools. The report emphasizes the ongoing threat posed by Turla's operations, particularly given their history of successful breaches in sensitive sectors. The backdoor's deployment method indicates a shift towards more stealthy and socially engineered attack vectors.