{"id":425,"date":"2017-08-30T19:44:55","date_gmt":"2017-08-30T19:44:55","guid":{"rendered":"https:\/\/eset-blog.aist.fun\/new-eset-research-uncovers-gazer-the-stealthy-backdoor-that-spies-on-embassies\/"},"modified":"2019-05-29T11:47:38","modified_gmt":"2019-05-29T11:47:38","slug":"new-eset-research-uncovers-gazer-the-stealthy-backdoor-that-spies-on-embassies","status":"publish","type":"post","link":"https:\/\/blog.eset.ee\/et\/en\/2017\/08\/30\/new-eset-research-uncovers-gazer-the-stealthy-backdoor-that-spies-on-embassies\/","title":{"rendered":"New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies"},"content":{"rendered":"

Security researchers at ESET have released new research<\/a> today into the activities of the notorious Turla cyberespionage group, and specifically a previously undocumented backdoor that has been used to spy on consulates and embassies worldwide.<\/p>\n

ESET\u2019s research team are the first in the world to document the advanced backdoor malware, which they have named \u201cGazer\u201d, <\/strong>despite evidence that it has been actively deployed in targeted attacks against governments and diplomats since at least 2016.<\/p>\n

Gazer\u2019s success can be explained by the advanced methods it uses to spy on its intended targets, and its ability to remain persistent on infected devices, embedding itself out of sight on victim\u2019s computers in an attempt to steal information for a long period of time.<\/p>\n

ESET researchers have discovered that Gazer has managed to infect a number of computers around the world, with the most victims being located in Europe. Curiously, ESET\u2019s examination of a variety of different espionage campaigns which used Gazer has identified that the main target appears to have been Southeastern Europe as well as countries in the former Soviet Union.<\/p>\n

The attacks show all the hallmarks of past campaigns launched by the Turla hacking group, namely:<\/p>\n