Threat Pulse 62High
Turla uses new Ceral malware in government Exchange servers (Romania, Kazakhstan) to read NATO and EU correspondence
Severity 6ActivereportedGovernment

Turla uses new Ceral malware in government Exchange servers (Romania, Kazakhstan) to read NATO and EU correspondence

· 4 days ago · bleepingcomputer.com
Sourcesbleepingcomputer.comtherecord.media
On X
@BleepinComputerverifiedNov 10, 10:04 UTC

Turla hackers use new Ceral malware to spy on govt Exchange servers

Open on X
@TheHackersNewsverifiedNov 10, 10:09 UTC

🚨 Russian-linked Turla hackers are using new Cereal malware to steal government emails. The toolset hides inside Microsoft Exchange processes, intercepts selected messages, and operates without external C2 infrastructure. Spotted in Kazakhstan and Romania.

Open on X
@TheRecord_MediaverifiedNov 10, 13:13 UTC

Russian state-linked hackers compromised government email servers in Romania and Kazakhstan to secretly intercept messages with NATO and European Union officials, according to new research

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 11)

Back to the board

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.