Turla Kazuar Sideloading Via HP Installer

Tim Peck@timpeck

•updated Jan 15, 2026•5•0•65

Detects the DLL sideloading of the Kazuar v3 loader (hpbprndiLOC.dll) by a legitimate Hewlett-Packard printer driver installer (hpbprndi.exe). This technique is used by Turla to initiate its infection chain.