All Detections

Turla Kazuar DLL Side Loading

avatar
Tim Peck@timpeck
updated Sep 20, 20250118

Detects potential DLL side-loading of the Turla Kazuar backdoor using legitimate executables launched from unusual, actor-specific file paths.

YARA-L