STOCKSTAY Another Day: The Latest Addition to Turla’s Intelligence Gathering Apparatus
Written by: Jordan Jones Introduction Google Threat Intelligence Group (GTIG) has conducted an in-depth analysis of a .NET backdoor, tracked as STOCKSTAY, that has been continually developed and deployed by the Russia-linked threat actor Turla (aka SUMMIT, Secret Blizzard, VENOMOUS BEAR, UAC-0194) since at least December 2022.
Summary from Google Threat Intelligence.
Explained
The technology and terms in this story. Learn more