What’s up with the Russian spies?

🐻 I wanted to learn more about the Russian APT group codenamed Turla, so I turned to my source at ESET, Tony Anscombe, to answer a few questions. Sources: 🔐 DAGMA IT Security https://dagma.eu/en 🤝 Gamaredon X Turla collab https://www.welivesecurity.com/en/eset-research/gamaredon-x-turla-collab/ 🕵️‍♀️ ESET APT Activity Report Q2 2025–Q3 2025 https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q2-2025-q3-2025/ 🇮🇷 Iran-aligned BladedFeline spies on Iraqi and Kurdish officials, ESET Research discovers https://www.eset.com/us/about/newsroom/research/iran-aligned-bladedfeline-spies-on-iraqi-and-kurdish-officials-eset-research-discovers/ Relevant xkcd: https://xkcd.com/1330/ © All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement. My socials: Instagram @mattchrobok https://www.instagram.com/mattchrobok/ Twixxer @ChrobokMatt https://twitter.com/ChrobokMatt Mastodon https://infosec.exchange/@mateuszchrobok LinkedIn @mateuszchrobok https://www.linkedin.com/in/mateuszchrobok/ TikTok @matt.chrobok Facebook https://www.facebook.com/mattchrobok Chapters: 00:00 Intro 01:26 Turla 02:38 Attribution 03:49 Kazuar 05:12 Collaboration 07:52 Examples 10:36 Evolution 12:10 Automation 13:22 Goals 17:03 Disaster 20:09 Recruitment 20:46 Monetisation 21:50 Marketplace 23:31 Differences 26:15 The End #Turla #Gamaredon #ESET #APT #cybersecurity