After conducting an initial compromise in October, Turla deployed custom Chisel tunneling software to expand infections across other systems in December before proceeding with data exfiltration activities a month later.
Article Link: New Turla attack sheds more light on backdoor | SC Media