Experts from Kaspersky have identified multiple similarities between Sunburst malware used in the SolarWinds supply chain attack and the Kazuar backdoor used in cyber espionage campaigns conducted by Russia-linked APT group Turla. The discovery comes a few days after the US agencies FBI, CISA, ODNI, and NSA released a joint statement that blames Russia for the solarWinds attack. Experts noticed several similarities between the Sunburst and the backdoor used by Turla APT, including a number of unusual, shared features.”]
Source: https://securityaffairs.co/wordpress/113289/apt/solarwinds-turla-apt.html