misp-galaxy:threat-actor="Turla Group",misp-galaxy:mitre-enterprise-attack-attack-pattern="PowerShell - T1086",misp-galaxy:mitre-enterprise-attack-attack-pattern="Valid Accounts - T1078",misp-galaxy:mitre-enterprise-attack-attack-pattern="Automated Collection - T1119",misp-galaxy:mitre-enterprise-attack-attack-pattern="System Network Configuration Discovery - T1016",misp-galaxy:mitre-enterprise-attack-attack-pattern="Automated Exfiltration - T1020",misp-galaxy:mitre-enterprise-attack-attack-pattern="Data Encrypted - T1022",misp-galaxy:mitre-enterprise-attack-attack-pattern="Data from Local System - T1005",misp-galaxy:mitre-enterprise-attack-attack-pattern="Email Collection - T1114",misp-galaxy:mitre-enterprise-attack-attack-pattern="Data Obfuscation - T1001",misp-galaxy:mitre-enterprise-attack-attack-pattern="Exfiltration Over Command and Control Channel - T1041",misp-galaxy:mitre-enterprise-attack-attack-pattern="Scheduled Transfer - T1029",misp-galaxy:mitre-enterprise-attack-attack-pattern="Standard Application Layer Protocol - T1071",misp-galaxy:mitre-enterprise-attack-attack-pattern="Standard Cryptographic Protocol - T1032",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white