Insikt Group. (2020, March 12). Swallowing the Snake’s Tail: Tracking Turla Infrastructure. Retrieved September 16, 2024.
None recorded.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1584.004 Server |
GroupTurla | Turla has used compromised servers as infrastructure. |
| T1584.006 Web Services |
GroupTurla | Turla has frequently used compromised WordPress sites for C2 infrastructure. |
| T1587.001 Malware |
GroupTurla | Turla has developed its own unique malware for use in operations. |
| T1588.001 Malware |
GroupTurla | Turla has used malware obtained after compromising other threat actors, such as OilRig. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
