Turla APT Spies on Polish NGOs Using TinyTurla Next Generation Backdoor

The TinyTurla-NG backdoor uses compromised WordPress websites as command and control endpoints and deploys PowerShell scripts to exfiltrate key material used to secure password databases, indicating a concerted effort to steal login credentials.