A new malware attributed to the Russian “Turla” advanced persistent threat (APT) group was found in research conducted by Cisco Talos. Created in 2020, the malware has been named “TinyTurla” due to its “limited functionality and simple coding style”. This aspect makes it difficult for antimalware technology to detect it as malicious. TinyTurla also attempts to hide itself by naming its service “Windows Time Service”, which mimics a service normally found in Windows. Its functionality includes a backdoor to a command-and-control (C2) server via an HTTPS channel. Prior to Taliban’s takeover of Afghanistan, TinyTurla has been used to target the Afghan government. CTAPT analysts are continuing to monitor this APT for future developments.