{"schema":"aeternae-malware-metadata/v1","generated_at":"2026-10-08T09:16:39+00:00","total_matching":1,"page":1,"page_size":200,"records":[{"id":"35596226526331b2a88a3e30f59148d9fbd6580d0b48500528b7138feb75b9f0","kind":"reference","title":"Turian - S0647","family":"Turian - S0647","category":"Malware intelligence","summary":"Name of ATT&CK software | [Turian](https://attack.mitre.org/software/S0647) is a backdoor that has been used by [BackdoorDiplomacy](https://attack.mitre.org/groups/G0135) to target Ministries of Foreign Affairs, telecommunication companies, and charities in Africa, Europe, the Middle East, and Asia. First reported in 2021, [Turian](https://attack.mitre.org/software/S0647) is likely related to Quar","first_seen":1759089007,"last_seen":1759089007,"created_at":1791440271,"updated_at":1791440271,"source_count":1,"data":{"context":"2025/09/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking.json","tags":["misp:galaxy-name=\"Malware\"","misp:galaxy-type=\"mitre-malware\"","misp-galaxy:mitre-malware=\"Turian - S0647\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/09/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking.json"],"filenames":[],"features":[],"related_cves":[],"labels":["Turian - S0647"]},"observations":[{"source_id":"talos_ioc","source_url":"https://github.com/Cisco-Talos/IOCs/blob/main/2025/09/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking.json","source_label":"Turian - S0647","evidence_class":"provider_reported","confidence":null,"observed_at":1759089007,"fetched_at":1791440271,"data":{"context":"2025/09/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking.json","tags":["misp:galaxy-name=\"Malware\"","misp:galaxy-type=\"mitre-malware\"","misp-galaxy:mitre-malware=\"Turian - S0647\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/09/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking.json"],"family":"Turian - S0647"}}],"indicators":[]}]}