Netskope Threat Labs

Secretblizzard

ATP Sandbox Adv. Heuristics

Secret Blizzard (a.k.a. Turla) is a Russian state sponsored threat group known for long running espionage operations against governments, militaries, and diplomatic organizations. The group deploys sophisticated tooling, hijacks the infrastructure of other cyberattackers, and uses unusual persistence techniques such as satellite based command and control.

First seen
April 2025
Last seen
October 2026
Alert Name
Win32.Trojan.Secretblizzard