Ajay Kumar: Created a new article

2023-09-25T18:48:12Z

Created a new article

New page

{{short description|Malware package}}
{{Other uses|Ouroboros (disambiguation)}}
{{unfocused|date=June 2017}}
{{expand language|topic=|langcode=uk|otherarticle=|date=June 2017}}
'''Turla''' or '''Uroboros''' ([[Russian language|Russian]]: '''Турла''') is a [[Trojan horse (computing)|Trojan]] package that is suspected by [[computer security]] researchers and Western [[intelligence officer]]s to be the product of a [[Russian government]] agency of the same name.<ref name="Boing"/><ref name="Reuters"/><ref>{{Cite web |url=https://www.valisluureamet.ee/pdf/raport-2018-ENG-web.pdf |title=Archived copy |access-date=2018-03-01 |archive-date=2020-10-26 |archive-url=https://web.archive.org/web/20201026005331/https://www.valisluureamet.ee/pdf/raport-2018-ENG-web.pdf |url-status=dead }}</ref>

High infection rates of the virus were observed in Russia, Kazakhstan and Vietnam, followed by US and China, and low infection rates in Europe, South America and Asia (including India).<ref>{{cite web |title=Turla Hiding in the Sky: Russian Speaking Cyberespionage Group Exploits Satellites to Reach the Ultimate Level of Anonymity |url=https://www.kaspersky.com/about/press-releases/2015_turla-hiding-in-the-sky-russian-speaking-cyberespionage-group-exploits-satellites-to-reach-the-ultimate-level-of-anonymity |website=kaspersky.com |language=en |date=26 May 2021}}</ref>

==Malware==
Turla has been targeting [[government]]s and [[military|militaries]] since at least 2008.<ref name="Reuters">{{cite news |url=https://www.reuters.com/article/us-russia-cyberespionage-insight-idUSBREA260YI20140307|title= Suspected Russian spyware Turla targets Europe, United States|work=Reuters|date=2014-03-13}}</ref><ref>{{cite news|url=https://www.theguardian.com/technology/2014/aug/07/turla-hackers-spying-governments-researcher-kaspersky-symantec|title=Sophisticated 'Turla' hackers spying on European governments, say researchers|first=Tom |last=Brewster|date=7 August 2014|publisher=|newspaper=[[The Guardian]]}}</ref><ref>{{cite web|url=http://www.symantec.com/connect/blogs/turla-spying-tool-targets-governments-and-diplomats|title=Turla: Spying tool targets governments and diplomats|publisher=}}</ref>

In December 2014 there was evidence of it targeting operating systems running [[Linux]].<ref>{{Cite web|url = https://securelist.com/the-penquin-turla-2/67962/|title = The 'Penquin' Turla|date = |accessdate = |website = |publisher = securelist.com|last = Baumgartner |first = Kurt}}</ref>

==Group==
The advanced persistent threat hacking group has also been named '''Turla'''.<ref name="Boing">{{cite web|url=https://boingboing.net/2017/06/08/dvb-s.html|title=The Russian Britney Spears Instagram hackers also used satellites to hide their tracks|website=[[Boing Boing]]|date=8 June 2017}}</ref> The group has probably been operating since the late 1990s, according to professor Thomas Rid of [[Johns Hopkins University]].<ref name=wired-the-underground-history>{{Cite news |title=The Underground History of Russia’s Most Ingenious Hacker Group |url=https://www.wired.com/story/turla-history-russia-fsb-hackers/ |last=Greenberg |first=Andy |date=2023-05-20 |access-date=2023-08-20 |work=[[Wired (magazine)|Wired]]}}</ref> Dan Goodin in ''[[Ars Technica]]'' described Turla as "Russian spies".<ref name="ARS">{{cite web|url=https://arstechnica.com/security/2017/06/russian-hackers-turn-to-britney-spears-for-help-concealing-espionage-malware/|title=You'll never guess where Russian spies are hiding their control servers|website=[[Ars Technica]]|date=6 June 2017}}</ref> Turla has since been given other names such as Snake, Krypton, and Venomous Bear.
===US actions against group===
In May 2023 the [[United States Department of Justice]] announced that the United States had managed to infiltrate machines that were infected by the malware and issue a command ordering the malware to delete itself.<ref name=wired-the-underground-history/> Affidavits from the [[FBI]] and DOJ revealed that the group was part of the Russian [[Federal Security Service]] Center 16 group in [[Ryazan]].<ref name=wired-the-underground-history/>
== See also ==
* [[Agent.BTZ]]
* [[Red October (malware)]]

== References ==
{{reflist}}

{{Hacking in the 2010s}}

[[Category:Spyware]]
[[Category:Linux malware]]
[[Category:Hacking (computer security)]]
[[Category:Espionage]]
[[Category:Cyberwarfare]]
[[Category:Hacker groups]]
[[Category:Hacking in the 2010s]]
[[Category:Russian advanced persistent threat groups]]
[[Category:Cybercrime in India]]

{{malware-stub}}

Turla (malware) - Revision history

Ajay Kumar: Created a new article