CERT24Turla hackers use new Cereal malware to spy on government Exchange serversLoading data…
CERT24Threat Observatory
Period

Turla hackers use new Cereal malware to spy on government Exchange servers

ESET documented Turla activity in late 2025 involving the Cereal toolset on Microsoft Exchange servers at government organizations to monitor email. Affected organizations were identified in Kazakhstan and Romania.

← Back to intelligence

Turla hackers use new Cereal malware to spy on government Exchange servers

ESET documented Turla activity in late 2025 involving the Cereal toolset on Microsoft Exchange servers at government organizations to monitor email. Affected organizations were identified in Kazakhstan and Romania.