Turla hackers use new Cereal malware to spy on govt Exchange servers

BleepingComputerNovember 10, 2026Threat Intel

The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]

Summary from BleepingComputer.

Read the full article at BleepingComputer

Full story3 outlets are covering this story. Read the summary and every outlet's coverage SecurityTabs reportupdated 10h agoESET: Russia-aligned Turla uses new Cereal malware to spy on Exchange email

Other sources covering the same vulnerabilities or event.

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Help Net SecurityyesterdayThreat Intel

Exchange for breakfast: Turla’s Cereal tricks are not for kids

ESET WeLiveSecurityyesterdayThreat Intel

Turla hackers use new Cereal malware to spy on govt Exchange servers

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Exchange for breakfast: Turla’s Cereal tricks are not for kids

More in Threat Intel

Iran-backed network directed London attacks over FaceTime, US prosecutors say

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Hackers use AntiFox AI agents in AWS credential-theft attacks

The XG Files: Falcon C2 Flying Under The (Browser) Radar

Related coverage

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Exchange for breakfast: Turla’s Cereal tricks are not for kids

More in Threat Intel

Iran-backed network directed London attacks over FaceTime, US prosecutors say

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Hackers use AntiFox AI agents in AWS credential-theft attacks

The XG Files: Falcon C2 Flying Under The (Browser) Radar