Turla, also known as Venomous Bear, Waterbug, and Uroboros, is a Russian speaking threat actor known since 2014. It is a complex cyberattack platform focused predominantly on diplomatic and government-related targets, particularly in the Middle East, Central and Far East Asia, Europe, North and South America and former Soviet bloc nations. The new modules were used in an active campaign that started at the beginning of 2019. The.NET modules include amusing strings such as TrumpTower as an initial vector for. RC4 encryption.”]
Source: https://securelist.com/turla-renews-its-arsenal-with-topinambour/91687/