Russian hackers have invaded the systems of Iranian cyber spies, after which, disguised as Iranian hackers, they have attacked some 35 countries. British and American intelligence services announced this on Monday in a statement.
This is the Russian group Turla, who, according to Estonia and the Czech Republic, work for the Russian secret service. The group would have been active for at least a year and a half.
Turla mainly hit targets in the Middle East, but also attacked a number of British organizations. The group used software and server infrastructure that it had taken over from the Iranian hacking organization APT34 (also known as OilRig).
The group directed its attacks on military installations, government agencies, scientific organizations and universities.
Turla tried to convince victims that they were hit by Iran. The group also gained access to the data of previous victims of APT34 in this way.
Turla was eventually exposed by the intelligence services of the United States and the United Kingdom. APT34, which is related to the Iranian government, probably did not know that Turla used his techniques.