Turla Cereal Malware: Russian Spies Turned Government Exchange Servers Into Hidden Control Hubs, What Is Confirmed and What to Check on Yours
Servers, Cloud & Remote Access Nov 11, 2026

Turla Cereal Malware: Russian Spies Turned Government Exchange Servers Into Hidden Control Hubs, What Is Confirmed and What to Check on Yours

ESET says Turla hid a new toolset called Cereal on government Exchange servers in Kazakhstan and Romania and used the servers as their own control hub. Here is what is confirmed and what to check on your Exchange server this week.

7 min read
Turla Cereal Malware: Spy Toolkit Hid Inside Microsoft Exchange Servers to Copy Government Email, What Is Confirmed and What Exchange Owners Should Check
Servers, Cloud & Remote Access Nov 11, 2026

Turla Cereal Malware: Spy Toolkit Hid Inside Microsoft Exchange Servers to Copy Government Email, What Is Confirmed and What Exchange Owners Should Check

ESET says the Turla espionage group used a new toolkit called Cereal to copy selected email from inside Exchange servers at two government organizations while normal mail kept flowing. Here is what is confirmed and what to check on your own Exchange server.

7 min read
Turla Cereal Malware: Russia-Linked Spies Hid Inside Government Exchange Servers to Copy Email, What Is Confirmed and How to Check Yours
Servers, Cloud & Remote Access Nov 11, 2026

Turla Cereal Malware: Russia-Linked Spies Hid Inside Government Exchange Servers to Copy Email, What Is Confirmed and How to Check Yours

ESET says Turla planted a new toolset called Cereal on on-premises Exchange servers at government bodies in Kazakhstan and Romania. The servers themselves were used to control it. Here is what is confirmed, what is not known and how to check your own server.

6 min read
Turla Cereal Exchange Malware: ESET Finds a Hidden Backdoor and Email Stealer Inside Government Exchange Servers, What Is Confirmed and How to Check Yours
Servers, Cloud & Remote Access Nov 11, 2026

Turla Cereal Exchange Malware: ESET Finds a Hidden Backdoor and Email Stealer Inside Government Exchange Servers, What Is Confirmed and How to Check Yours

ESET says the Turla espionage group used a toolkit it calls Cereal to turn on-premises Exchange servers into a hidden control point and email collection hub. Here is what is confirmed, what is not known, and what to check this week.

7 min read

Security alerts by email

The next security hole is already out there. Hear about it from us first.

When attackers start using a flaw in software businesses run on, we email what it is, whether it touches you and what to do that week, with a round-up of our latest security writing. Free, one-click unsubscribe. You get the checklist straight away: 12 things to secure this week.

Protected by reCAPTCHA - Privacy and Terms.