APT / THREAT GROUP

TinyTurla

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Talos describes this as a malware family with very scoped functionality and thus a small code footprint, likely used as a second chance backdoor.

Threat Analysis

TinyTurla is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.talosintelligence.com/2021/09/tinyturla.html

→https://cybergeeks.tech/a-step-by-step-analysis-of-the-russian-apt-turla-backdoor-called-tinyturla/

→https://infosec.exchange/@SophosXOps/111109357153515214

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

TinyTurlawin.tiny_turla

External Intelligence

Malpedia: win.tiny_turla

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search TinyTurla