The discovery of CosmicEnergy is unique because malware families targeting industrial control systems are rarely disclosed.
Researchers said that it "is difficult to measure" the potential long-term impact of TurkoRat infections on developer systems.
While Operation Medusa disrupts long standing espionage efforts by Turla, security researchers say that its effects will only be temporary.
A recent APT campaign shows how threat actors are adding complexity to the decade-old attack.
The new malware was found stealing saved usernames and passwords in browsers in order to compromise business Gmail, Outlook and Facebook accounts.