INDICATOR1 SOURCE
URL http://85.222.235.156:8000
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordÆ / PUBLIC MALWARE INTELLIGENCE
Follow the evidence.
Published file metadata, source observations and research history in one connected catalog.
131,398Catalog records
62,804File records
147,419Source observations
123Family labels
131,398 MATCHING RECORDS
INDICATOR1 SOURCE
IP 134.209.222.206
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.bleepingcomputer.com/news/security/turla-outlook-backdoor-uses-clever-tactics-for-stealth-and-persistence/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.theguardian.com/technology/2014/aug/07/turla-hackers-spying-governments-researcher-kaspersky-symantec
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://skategirlchina.com/wp-includes/ms-locale.php
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www2.fireeye.com/rs/848-DID-242/images/rpt-witchcoven.pdf
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://threatpost.com/linux-modules-connected-to-turla-apt-discovered/109765/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.trendmicro.com/vinfo/vn/security/news/cyber-attacks/cyberespionage-group-turla-deploys-backdoor-ahead-of-g20-summit
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.first.org/resources/papers/tbilisi2014/turla-operations_and_development.pdf
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://mnp.nkr.am/wp-includes/js/jquery/jquery-migrate.min.js
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.cfr.org/interactive/cyber-operations/turla
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://securelist.com/analysis/publications/65545/the-epic-turla-operation/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://securelist.com/blog/research/67962/the-penquin-turla-2/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://yle.fi/uutiset/osasto/news/russian_group_behind_2013_foreign_ministry_hack/8591548
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.circl.lu/pub/tr-25/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://134.209.222.206:15363
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.engadget.com/2017/06/07/russian-malware-hidden-britney-spears-instagram/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://securelist.com/introducing-whitebear/81638/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.welivesecurity.com/2017/03/30/carbon-paper-peering-turlas-second-stage-backdoor/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://securelist.com/satellite-turla-apt-command-and-control-in-the-sky/72081/
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
IP 85.222.235.156
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://www.armconsul.ru/user/themes/ayeps/dist/js/bundle.0eb0f2cb2808b4b35a94.js
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL http://adgf.am
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordINDICATOR1 SOURCE
URL https://www.melani.admin.ch/melani/en/home/dokumentation/reports/technical-reports/technical-report_apt_case_ruag.html
Indicator published by the cited source.
Collected 2026-10-08 08:01 UTCOpen evidence recordSource labels and confidence are preserved. A filename or report mention alone does not establish that a file is malicious. Indicator observation dates describe the cited source; collection dates describe this catalog.