Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room

Security AffairsNovember 10, 2026Threat Intel

MentionsTurla ESET Microsoft Exchange Server

ESET found Russia-Linked APT group Turla using a new toolset, dubbed Cereal, on government Exchange servers in Kazakhstan and Romania. ESET Research detailed a previously undocumented toolset it calls Cereal, built to run on Microsoft Exchange servers. The researchers found it on 28 November 2025 at a government body in Kazakhstan, and later at a […]

Summary from Security Affairs.

Read the full article at Security Affairs

Full story2 outlets are covering this story. Read the summary and every outlet's coverage SecurityTabs reportupdated 10h agoESET: Russia-aligned Turla uses new Cereal malware to spy on Exchange email