Python Malware Targets Tatar-Language Users TA866 Threat Actor Strikes Again

25-Sep-23

The most recent cybersecurity news mentions the discovery of new Python malware that targets Tatar language speakers. Tatars are a Turkic-speaking people who are mostly found in Russia and its adjacent nations. They speak the Tatar language. This Cyble-sourced Python malware variant is capable of taking screenshots on the victim’s computers and sending them over to a remote server using FTP (File Transfer Protocol).



This network protocol enables file and folder transfers between hosts via a TCP-based network, such as the internet. The infamous TA866 threat actor is responsible for this campaign. This infamous group uses Python malware to carry out its operations and focuses on Tatar-speaking people.

Read More…