Russian APT Turla transformed its Kazuar backdoor into a modular P2P botnet for persistent government access. Microsoft, Palo Alto, and BleepingComputer all tracked the evolution.