TinyTurlaNG

Aliases: TTNG

First seen
2023-12-01 00:00:00
Malware type
backdoor
Profile updated
2026-07-07 15:22:57

Targeted industries: education-and-nonprofits government-and-public-sector

Targeted regions: country_code:pl

Context

Cisco Talos states that TinyTurla-NG is a small “last chance” backdoor that is left behind to be used when all other unauthorized access/backdoor mechanisms have failed or been detected on the infected systems. TinyTurla-NG was seen as early as December 2023 targeting a Polish non-governmental organization (NGO) working on improving Polish democracy and supporting Ukraine during the Russian invasion.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Tinyturla Ng (report)
  • github.com — Turla%20Technical%20Analysis%20Report (report)
  • Cisco Talos — Tinyturla Next Generation (report)

External references