#7
The Hacker News
general
June 26, 2026 at 07:15 UTC
Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
By [email protected] (The Hacker News)
AI Summary
Google Threat Intelligence Group has attributed the previously undocumented .NET backdoor STOCKSTAY to Turla (Russian state-sponsored), with confirmed deployments against Ukrainian government and military organizations as well as entities with ties to Italian foreign policy. The backdoor is described as under continuous development, indicating an active and evolving espionage toolchain targeting NATO-adjacent targets.
Relevance score: 82.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →