Exchange for breakfast: Turla’s Cereal tricks are not for kids

ESET WeLiveSecurityNovember 10, 2026Threat Intel

ESET Research describes Turla’s Cereal toolset, featuring a novel Exchange email collection module, a unique C&C mechanism, and sophisticated .NET execution tricks

Summary from ESET WeLiveSecurity.

Read the full article at ESET WeLiveSecurity

Full story3 outlets are covering this story. Read the summary and every outlet's coverage SecurityTabs reportupdated 10h agoESET: Russia-aligned Turla uses new Cereal malware to spy on Exchange email

Explained

The technology and terms in this story. Learn more

ConceptCommand and control · C2The servers attackers use to send instructions to their malware and receive stolen data.

Other sources covering the same vulnerabilities or event.

Turla hackers use new Cereal malware to spy on govt Exchange servers

BleepingComputeryesterdayThreat Intel

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Help Net SecurityyesterdayThreat Intel

Exchange for breakfast: Turla’s Cereal tricks are not for kids

Explained

Turla hackers use new Cereal malware to spy on govt Exchange servers

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

More in Threat Intel

Iran-backed network directed London attacks over FaceTime, US prosecutors say

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Hackers use AntiFox AI agents in AWS credential-theft attacks

The XG Files: Falcon C2 Flying Under The (Browser) Radar

Explained

Related coverage

Turla hackers use new Cereal malware to spy on govt Exchange servers

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

More in Threat Intel

Iran-backed network directed London attacks over FaceTime, US prosecutors say

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Hackers use AntiFox AI agents in AWS credential-theft attacks

The XG Files: Falcon C2 Flying Under The (Browser) Radar