Do Son This includes the use of LNK files, MSbuild for loading the fileless backdoor, and novel methods for disabling event logging
Turla campaigns
The campaign investigated demonstrates Turla's focus on targeted attacks. This 'Pelmeni Wrapper' loads the next stage payload.