The US’s National Security Agency (NSA) and UK’s National Cyber Security Centre (NCSC) released a joint Cybersecurity Advisory detailing the activities of the Russian government-associated advanced persistent threat (APT) Turla group, also known as Uroburos, Waterbug, or VENOMOUS BEAR.

According to the New Jersey Cybersecurity & Communications Integration Cell (NJCCIC), the advisory provides an update to previous NCSC reports of the group’s use of Iranian APT tools, such as Neuron and Nautilus, in their cyber operations against military establishments, government departments, universities, and scientific organizations, mainly in the Middle East.