IronNetInjector: Turla's New Malware Loading Tool

Unit 42 researchers have found several malicious IronPython scripts whose purpose is to load and run Turla’s malware tools on a victim’s system. The use of IronPython for malicious purposes isn’t new, but the way Turla uses it is new. The overall method is known as Bring Your Own Interpreter (BYOI).

https://unit42.paloaltonetworks.com/ironnetinjector/