← Back to Feed
STOCKSTAY Another Day: The Latest Addition to Turla’s Intelligence Gathering Apparatus
June 25, 2026 · Google Cloud Security · Severity: HIGH
Written by: Jordan Jones Introduction Google Threat Intelligence Group (GTIG) has conducted an in-depth analysis of a.NET backdoor, tracked as STOCKSTAY, that has been continually developed and deployed by the Russia-linked threat actor Turla (aka SUMMIT, Secret Blizzard, VENOMOUS BEAR,...
Key Takeaways
- Written by: Jordan Jones Introduction Google Threat Intelligence Group (GTIG) has conducted an in-depth analysis of.
- Turla has deployed STOCKSTAY against government and military organizations in Ukraine, as well as entities with an.
- As part of our continued tracking of this group, This provides an overview of our STOCKSTAY analysis.