Turla SilentMoon

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.turla_silentmoon

Threat Analysis

Turla SilentMoon is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://cocomelonc.github.io/tutorial/2022/06/12/malware-pers-7.html

→https://twitter.com/Arkbird_SOLG/status/1304187749373800455

→https://www.accenture.com/us-en/blogs/cyber-defense/turla-belugasturgeon-compromises-government-entity

→https://www.emanueledelucia.net/the-bigboss-rules-something-about-one-of-the-uroburos-rpc-based-backdoors/

→https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf

Quick Facts

TypeAPT / Threat Group

Aliases6

Also Known As

win.turla_silentmoonCacaoGoldenSkyBigBossHyperStackTurla SilentMoon

External Intelligence

Malpedia: win.turla_silentmoon

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Turla SilentMoon