Covered by 2 outlets — first reported by CyberScoop, Nov 10, 10:00 UTC
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Summary
ESET says the Russia-aligned group Turla, also known as Snake, used a previously undocumented toolset it calls Cereal to quietly collect emails from Microsoft Exchange servers. ESET's report names government organizations in Kazakhstan and Romania as victims. The toolset is described as modular and as leaving few obvious signs of compromise.
AI summary by the SecurityTabs newsroom, checked against CyberScoop, The Hacker News. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
CyberScoopFirst report
Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report.
The Hacker News
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to…
Explained
The technology and terms in this story. Learn more