The Russia-linked APT group Turla has executed a cyber-espionage campaign by infiltrating the C2 servers of Pakistani hacking group Storm-0156.Turla captured C2 servers and used them to spread malware targeting Afghan government networks.Turla used Storm-0156 as cover to gain access to targeted systems without direct strikes.Turla's strategy involves taking over other actors' tools and infrastructure to reduce resource utilization and increase espionage.