Skip to content
Auto-CTI
Back to all actors

Turla

Nation-state Espionage Russia Active

Aliases: Snake · Venomous Bear · Secret Blizzard · Waterbug · Uroburos

Mentions
3
First seen
26 Jun 2026
Last seen
13 Jul 2026

Relevant to you · Relevant

Threat focus:
espionage / apt
Sector / region:
ManufacturingDACH

Origin

Russia — Russian FSB (Center 16)

Profile

Turla is a Russian threat actor known for espionage and destructive attacks. The EU has imposed sanctions on Russia related to severe cyberattacks and sabotage. According to Google, Turla uses the new STOCKSTAY backdoor in espionage attacks in Ukraine.

Targeted regions

Europe

Targeted countries

Ukraine

Associated malware / tools

STOCKSTAY

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC