Two different hacking teams best known as Turla and Fancy Bear employed the same stealthy attack method in an unusual overlap of hacking activity.
A rare overlap in malware delivery and targets recently between two separate and traditionally very different Russian hacking groups appears to indicate some type of pooling of their resources.
Researchers from Kaspersky Lab spotted Turla – aka Venemous Bear/Snake/Uroburos – using the same method of malware delivery used by Zebrocy, a subgroup of Sofacy – aka Fancy Bear/APT 28 – with each going after some of the same geopolitical targets in central Asia.
