Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments

Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report.

Covered by 4 publishers within 4 hours of the first report.

Summary from CyberScoop.

Reporting4

CS CyberScoop Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments · djohnson 5:00 AM

BC BleepingComputer Turla hackers use new Cereal malware to spy on govt Exchange servers · Bill Toulas 5:04 AM

THN The Hacker News Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers · info@thehackernews.com (The Hacker News) 5:07 AM

CSN Cyber Security News Turla Hackers Use Cereal Malware Toolset to Exploit Microsoft Exchange Servers for Email Theft · Guru Baran 8:42 AM

Related

RTW CrowdStrike says China-linked hackers used ARTEX to target more than 200 organizations October 30

TRD Hackers use fake OpenAI, SpaceX, and Anthropic event invites in new phishing scam to steal Microsoft and Google accounts November 5

CSN Microsoft Reveals 78% of Exploited Vulnerabilities Enable System Takeover and Privilege Escalation November 3

RTW Microsoft patent application proposes AI training on idle gaming PCs November 10

Topics Microsoft