Would you find Turla if it had been in your network for years?
A threat group attributed to Russia’s Federal Security Service (FSB), active since at least 2004. It has spied on governments, embassies and militaries in more than 50 countries with quiet, custom implants.
Turla
- Origin
- Russia · State-sponsored
- Also known as
- Venomous Bear, Secret Blizzard
- Lure
- Spearphishing How they get in
- Weapon
- Stealthy implants Their signature move
- Loot
- Secrets What they are after
- MITRE ATT&CK®
- Turla (G0010)
Try an exercise against this group
In an exercise against a group like this one, your team meets techniques like those documented for it, in the order a real attack would take. Afterwards the report shows where the attack was stopped.
Book a demo See all threat cards
The cards describe publicly known threat groups. They say nothing about who those groups target. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK® is a registered trademark of The MITRE Corporation.