CyberInsider سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۰

Russian hackers use stealthy Exchange malware to steal government emails

Russia-linked hackers have used a previously undocumented malware toolkit called Cereal to compromise government organizations in Romania and Kazakhstan, turning Microsoft Exchange servers into email-collection and command-execution hubs. ESET researchers say the toolkit includes a novel interception technique that copies selected messages from inside Exchange’s mail transport pipeline. In Romania, the attackers conf…

Malware & Threats

Read the full article at CyberInsider Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CyberScoop سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۴:۳۰

Spyware attacks trend toward hitting just about anyone

iVerify’s report Tuesday adds to evidence of spyware’s increasingly indiscriminate targeting. The post Spyware attacks trend toward hitting just about anyone appeared first on CyberScoop.

Malware & Threats Privacy

Source

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۷

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET report shared with The Hacker News ahead of publication, the sophisticated and modular tool is designed for

Malware & Threats Threat Intelligence

Source

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۴

Turla hackers use new Cereal malware to spy on govt Exchange servers

The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]

Malware & Threats

Source

Help Net Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۰

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found the malware and named it Cereal. The toolset doesn’t need an attacker-owned server. Operators send commands to the victim’s internet-facing Exchange server, dressed up as o…

Malware & Threats Threat Intelligence

Source