threatintel
actor tracker
Turla
Advisoryseverity: High2023-05-09

Joint advisory AA23-129A: Hunting Russian Intelligence Snake Malware

published by CISA
Actor
TurlaRU · RussiaAPT

Russian state-sponsored actor publicly attributed to FSB Center 16. One of the longest-running espionage sets on record, known for the Snake (Uroburos) implant — a sophisticated peer-to-peer covert c…

Summary

CISA, FBI, NSA, and Five Eyes partners released a joint advisory publicly attributing the Snake implant to FSB Center 16, describing the architecture of the global peer-to-peer network, and providing technical detection guidance for defenders.

Tags

five-eyessnakefsb

Primary source

cisa.gov

Other Turla events