⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Google Threat Intelligence Group's in-depth analysis of STOCKSTAY reveals a continuously developed .NET backdoor used by the Russia-linked Turla APT group as part of its intelligence gathering apparatus. The malware represents the group's ongoing investment in covert collection capabilities.
This article presents an in-depth analysis of STOCKSTAY, a .NET backdoor deployed by the Turla threat actor for cyber espionage against Ukrainian and Italian targets. It highlights the tool's continuous development and its similarities to the previously known KAZUAR toolkit.
ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C.
ESET Research analyzes Gamaredon's evolving toolset in 2025, highlighting the group's growing reliance on legitimate online services to conceal command-and-control infrastructure and exfiltrate stolen data. New tunneling techniques, worker scripts, dead drop mechanisms, and alliances expand their operational reach.
ESET Research analyzes Gamaredon's new toolset and the group's growing reliance on legitimate online services to hide its C&C.
ESET Research analyzes Gamaredon's new toolset and the group's growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data.