VERY IMPORTANT

"Recently Telsy observed some artifacts related to an attack happened on June 2020 that, with high confidence, has to be linked to the popular Russian Advance Persistent Threat (APT) known as Venomous Bear (aka Turla or Uroburos). In this campaign the hacking group used an implant previously unseen, that we internally named NewPass as one of the parameters used to send exfiltrated data to the command and control."