نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Help Net Security

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found the malware and named it Cereal. The toolset doesn’t need an attacker-owned server. Operators send commands to the victim’s internet-facing Exchange server, dressed up as o…

بدافزار و آلودگی هوش تهدید
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

Windows settings backup is on by default starting with Windows 11 26H2

Starting with Windows 11, version 26H2, Windows settings backup will switch on by default on eligible devices. The company renamed the feature, which launched in August 2025 as Windows Backup for Organizations, and moved the management of roaming settings into the same policy tools. What gets saved The feature backs up supported Windows settings and the list of installed Microsoft Store apps. When restore is availabl…

سیستم‌عامل ذخیره‌سازی و پشتیبان‌گیری
منبع
CyberInsider

Russian hackers use stealthy Exchange malware to steal government emails

Russia-linked hackers have used a previously undocumented malware toolkit called Cereal to compromise government organizations in Romania and Kazakhstan, turning Microsoft Exchange servers into email-collection and command-execution hubs. ESET researchers say the toolkit includes a novel interception technique that copies selected messages from inside Exchange’s mail transport pipeline. In Romania, the attackers conf…

بدافزار و آلودگی
منبع
CyberScoop

Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments

Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report. The post Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments appeared first on CyberScoop.

هوش تهدید
منبع