A joint report from Britain’s National Cyber Security Center and the U.S. National Security Agency radically revised the narrative. It says Russian hackers called Turla hijacked Iranian attack infrastructure from an Iranian nation-state attack team called OilRig, aka APT34, Crambus or HelixKitten. Officials say releasing tactics, techniques and procedures used by attackers is meant to help organizations better defend themselves. But such a strategy also aims to make launching these types of attacks more time-consuming and costly for adversaries.”]
Source: https://www.cuinfosecurity.com/blogs/turla-teardown-attribute-nation-state-attacks-p-2813