ATT&CKReferencesGitHub Turla Driver Loader

GitHub Turla Driver Loader

TDL Project. (2016, February 4). TDL (Turla Driver Loader). Retrieved April 22, 2021.

Open the source

Techniques1

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples1

TechniqueUsed byProcedure example
T1553.006
Code Signing Policy Modification
GroupTurla

Turla has modified variables in kernel memory to turn off Driver Signature Enforcement after exploiting vulnerabilities that obtained kernel mode privileges.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.