Russian hacking group Turla is deploying an IronPython-based malware loader called “IronNetInjector” The loader delivers ComRAT, a remote access Trojan. Turla, linked to Russia’s FSB, is reported to be part of Russias FSB (formerly KGB) Turla has carried out a series of operations targeting government and military agencies in at least 35 countries since 2008. The loader comes with capabilities to obfuscate malware codes and encrypt and decrypts the payloads.”]
Source: https://www.cuinfosecurity.com/russian-hacking-group-deploys-ironpython-malware-loader-a-16044