Since 2022, Turla, an advanced persistent threat (APT) group associated with Russia, has been connected to an as-yet-unreported campaign in which it gained access to the command-and-control (C2) servers of Storm-0156, a hacking gang based in Pakistan, in order to carry out its own activities.
According to Lumen Technologies Black Lotus Labs, the behavior, which was initially noticed in December 2022, is the most recent example of a nation-state adversary integrating itself into another group’s hostile operations in order to achieve their own goals and cloud attribution initiatives.
Secret Blizzard first obtained control of a Storm-0156 C2 server in December 2022 read more about Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.