IOC Radar
TLP:WHITE1 IOC

Turla Hackers Use STOCKSTAY .NET Backdoor to Spy on Ukrainian Government and Military Targets

CP
Cyber Press
Published June 29, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYCl0pTurlaINFRASTRUCTUREunknownCAPABILITYCl0pVICTIMunknown
Adversary(2)
Infrastructure
Capability(1)
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise1

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2025-8088
aptespionageexploit
High
61
Jun 2, 26

IOC Relationship Graph

IOC Relationship Graph1 total IOCs
CVE
CVE1Actors2Malware1REPORTTurla Hackers Use STOCKSTACl0pTurlaCl0p
scroll to zoom · drag to pan · click IOC to open