Researchers Warn of Kazakhstan’s Stealthy Cyber Espionage Group

Cybersecurity firm Cisco Talos has identified a new threat actor, YoroTrooper, believed to be operated from Kazakhstan. YoroTrooper uses spear-phishing and malware to steal data from state entities in Commonwealth of Independent States (CIS) countries. It has also adopted a strategy to camouflage its activities by emulating operations from Azerbaijan. The group has updated its tools to use custom malware and maintain its own infrastructure.