Turla has evolved its Kazuar backdoor into a modular P2P botnet designed for stealth, persistence, and long-term access on compromised systems. Microsoft says the new architecture uses Kernel, Bridge, and Worker modules to coordinate tasks, collect data, and exfiltrate information while reducing its visible footprint. #Turla #Kazuar #SecretBlizzard #FSB
Keypoints
- Turla upgraded Kazuar into a modular peer-to-peer botnet.
- Microsoft links Turla to Secret Blizzard and Russia’s FSB Center 16.
- The malware targets government, diplomatic, and defense sectors.
- Kazuar uses Kernel, Bridge, and Worker modules for coordinated operations.
- Pelmeni and ShadowLoader help deploy the malware and support stealthy persistence.
Read More: https://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.html