A hitherto unknown group that has been dubbed Tortoiseshell is using both customised and common Windows malware to target IT providers in Saudi Arabia, the American security firm Symantec claims, adding that these attacks appear to be focused on the supply chain and ultimately aimed at the providers' customers.
A well-known attack group that is known as Turla, Snake or Waterbug appears to have hijacked and used the infrastructure of another similar group, known as OilRig, APT34 or Crambus, the American security firm Symantec claims.