Jun 26 – June 29, 2026 · 3 reports
- Turla has added new malware, StockStay, to Russia's espionage campaigns against Ukraine, per Google threat researchers. (The Record) · Jun 29 · observed · Threat Activity
- Turla is deploying a new backdoor, StockStay, against Ukrainian government and military organizations for espionage, per Google/Mandiant. SecurityWeek, Mandiant · Jun 28 · observed · Threat Activity
- Turla has been attributed to a previously undocumented .NET backdoor, STOCKSTAY, deployed against Ukrainian government and military targets and entities tied to Italian foreign policy, per Google Threat Intelligence Group. The Hacker News · Jun 27 · observed · Threat Activity