SOSECIO
Local processing active

Malware

Track malware families, their activity, and the techniques threat actors use to compromise systems.

Featured Family

Hand-drawn analyst tracing three deceptive delivery artifacts into the STOCKSTAY system, then across its net, cor, and sys role cabinets toward a small slash-ws cloud relay.View full profile

Turla separated delivery, orchestration, host actions, and cloud relay traffic into cooperating processes, requiring defenders to reconnect process, configuration, and network evidence.

PlatformWindows

First SeenEarliest build artifact: Dec 2022

Last SeenNov 2025

SeverityHigh

Tracked Families

FamilyPlatformLast SeenSeverity
A three-stage warm-paper vCenter sequence: at 03:37 DC01 remains in place while an outlined, powered-off temporary clone appears; by 04:05 only that clone dissolves from inventory.BRICKSTORMWindows/Linux servers and appliancesSep 2025High