Skip to content
NewA calmer, faster ZeroHour

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

The Hacker Newsby @TheHackersNews ()4 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-8088
WinRAR Path Traversal (CVE-2025-8088) Enables Arbitrary Code Execution
8.494%KEVRansomware
KEV

From the original article

4 min read at thehackernews.com

The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented . NET backdoor called STOCKSTAY that has been deployed against government and military organizations in Ukraine, and entities that have an interest in Italian foreign policy.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.