I wrote up the Handala attack on ReutOne, includes the first IoCs on Handala's python trojanhttps://doublepulsar.com/handala-attempts-a-supply-chain-hack-via-reutone-001aa3cc684f