Russia-backed cyber espionage group Turla has carried out more attacks than previously thought using infrastructure and malware hijacked from Iranian threat group APT34. Turla’s use of three malware tools Neuron, Nautilus, and an ASPX-based backdoor in attacks targeted at UK organizations. This is believed to be the first publicly known instance of one state-backed APT group hijacking and using a rival nation-state actor’s attack infrastructure to expand victim targeting, says Symantec’s Alexandrea Berninger.”]