Malware
TinyTurlaNG
aka TTNG
Cisco Talos states that TinyTurla-NG is a small “last chance” backdoor that is left behind to be used when all other unauthorized access/backdoor mechanisms have failed or been detected on the infecte
TinyTurlaNG, also known as TTNG, is a Windows malware family operated by Turla.
Background
Per Cisco Talos, TinyTurla-NG is a compact “last chance” backdoor planted to serve as a fallback once every other backdoor or unauthorized-access method on the compromised systems has failed or been spotted. It was observed as early as December 2023 against a Polish non-governmental organization (NGO) devoted to strengthening Polish democracy and backing Ukraine during the Russian invasion.
Source: Malpedia (Fraunhofer FKIE).