Russian hackers use stealthy Exchange malware to steal government emails

Russia-linked hackers have used a previously undocumented malware toolkit called Cereal to compromise government organizations in Romania and Kazakhstan, turning Microsoft Exchange servers into email-collection and command-execution hubs. ESET researchers say the toolkit includes a novel interception technique that copies selected messages from inside Exchange’s mail transport pipeline. In Romania, the attackers conf…

بدافزار و آلودگی
خواندن متن کامل در CyberInsider درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
The Hacker News

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET report shared with The Hacker News ahead of publication, the sophisticated and modular tool is designed for