Skip to content

APT Profile – Turla

Cyber Espionage Under the Radar Since 1996

About Turla

Turla is possibly a state-integrated group (civil intelligence service/agency members). Private threat intelligence companies, such as Talos Intelligence, designated Turla as a “state-sponsored” actor. As noted with respect to the Five Eyes Joint Cybersecurity Advisory, public reporting on the degree of proximity to Russian state entities, particularly the FSB, differs. Unlike other Russian groups, such as Fancy Bear, Cozy Bear, Sandworm, or Energetic Bear, which government and industry reports alike have linked to Russian government agencies, open-source material leaves the question of the institutional sponsorship of Turla open to further corroboration. A German media report published in February 2022 presented evidence for the Turla-FSB connection, identifying two former Turla programmers that worked at the Russian company Center-Inform, which officially operates on behalf of the FSB.

Associated APT designations

Country of origin

Period of activity


More APT profiles

  • Research and Analysis
APT Profile – UNC1151

May 25, 2023
Technical and contextual characteristics of the UNC1151 group are analysed in this APT Profile from the EuRepoC team
Load More

End of Content.

Welcome to our Cyber Incident Dashboard!

For best results, please view on a desktop device.