Malware
2026-11-10 · 10 h ago
Source: Help Net Security
Turla’s Cereal malware turns victims’ Exchange servers into spy hubs
Turla’s Cereal malware turns victims’ Exchange servers into spy hubs
Summary
Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found the malware and named it Cereal. The toolset doesn’t need an attacker-owned server. Operators send commands to the victim’s internet-facing Exchange…
For more information, read the full story at the original source: Help Net Security ↗