Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

The Russia-aligned state-sponsored threat actor Turla, also known as Snake, is using a previously undocumented cyber espionage toolset called Cereal to break into victims' Microsoft Exchange servers and collect emails, according to ESET. The sophisticated, modular toolset was found on government Exchange servers in Kazakhstan and Romania.