Russia-linked Turla APT targets Austria, Estonia, and NATO platform

Russia-linked APT group Turla was observed targeting the Austrian Economic Chamber, a NATO eLearning platform, and the Baltic Defense College. Experts discovered the word document “War Bulletin April 27, 19:00 CET” in every directory, the document included an external PNG file dubbed logo.png which was not reachable during the investigation. The document does not contain any malicious macros, a circumstance thatsuggests the PNG is used to for reconnaissance purposes. “It is quite interesting that the request to the file is performed via the HTTP protocol and not an SMB inclusion. Therefore,this campaign does not leverage any malicious code but has been used for reconnaissance purposes only.” reads the analysis published by the experts.

Read more about it: Here