Do Son This includes the use of LNK files, MSbuild for loading the fileless backdoor, and novel methods for disabling event logging
Turla APT
Researchers at Talos and CERT.NGO have pulled back the curtain on new malicious components deployed by the notorious Turla APT group