turla

Live1

1. live
   Microsoft Exchange Turla Cereal malware turns Exchange servers into spy hubs

   Breaches & attacks · Exploited · since 10 Nov 2026

   The Russia-aligned threat group Turla deployed a modular .NET toolset named Cereal on Microsoft Exchange servers at government organizations in Kazakhstan and Romania. The malware hijacks mail flow traffic to stealthily exfiltrate emails without requiring an external command-and-control server.

Earlier0

Nothing closed yet.