Tag: Cereal malware

  • Cereal malware targets government Exchange servers

    Cereal malware targets government Exchange servers

    Cereal malware has enabled Russian state-backed hackers to intercept emails on Microsoft Exchange servers at government organizations in Kazakhstan and Romania. Researchers identified the toolset in late 2025 and detailed its role in a Turla espionage campaign on November 10. The investigation first uncovered the modular .NET malware at a government body in Kazakhstan. A…