Russian Turla group deploys new 'Cereal' toolset to steal emails from Kazakhstan, Romanian governments

ESET reports Russian APT group Turla used a novel toolset, dubbed 'Turla's Cereal,' targeting Microsoft Exchange servers to silently exfiltrate emails from government networks in Kazakhstan and Romania. The tools reportedly lack common indicators of compromise, making detection difficult. This marks a notable evolution in Turla's tradecraft, expanding its espionage focus to Central and Eastern European governments.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works