NSA and NCSC Release Joint Advisory on Turla Group Activity

The National Security Agency (NSA) and the United Kingdom National Cyber Security Centre (NCSC) have released a joint advisory (available below) on advanced persistent threat (APT) group Turla – widely reported to be Russian. The advisory provides an update to NCSC’s January 2018 report on Turla’s use of the malicious Neuron, Nautilus, and Snake tools to steal sensitive data. Additionally, the advisory states that Turla has compromised – and is currently leveraging – an Iranian APT group’s infrastructure and resources, which include the Neuron and Nautilus tools. The DHS Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the resources for more information. Read the advisory at CISA.