Turla Uses Cereal Malware to Steal Exchange Emails

The Russian group Turla uses Cereal malware in a new campaign targeting government Microsoft Exchange servers to steal emails, according to ESET’s report. Turla, also known as Snake, has introduced this sophisticated and modular toolset, aiming for covert operations within these servers. This discovery emerges from an analysis shared by ESET, which underscores the increasing complexity of cyber espionage tactics by state-sponsored actors. The Cereal malware suite exemplifies advanced cyber capabilities, enabling intrusions that are hard to detect and neutralize. As these tools evolve, they pose significant threats to governments relying on Microsoft Exchange for communication. Cybersecurity experts emphasize the importance of maintaining robust defenses against such advanced persistent threats. Turla’s use of the Cereal malware underscores the ever-evolving landscape of cyber threats that target critical government infrastructure. For a comprehensive analysis of this development, readers are encouraged to explore the full article on The Hacker News.

https://thehackernews.com/2026/11/russian-turla-hackers-use-new-cereal.html