Turla’s Kazuar variant remains a persistent threat, accompanied by a new .NET-based backdoor, DeliveryCheck, attributed to Russian actor Turla. The attacks target Ukraine’s defense sector, utilizing tactics like PowerShell DSC and signaling a dynamic cybersecurity landscape.
