CyberScoop سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۰

Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments

Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report. The post Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments appeared first on CyberScoop.

Threat Intelligence

Read the full article at CyberScoop Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CyberScoop سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۴:۳۰

Spyware attacks trend toward hitting just about anyone

iVerify’s report Tuesday adds to evidence of spyware’s increasingly indiscriminate targeting. The post Spyware attacks trend toward hitting just about anyone appeared first on CyberScoop.

Malware & Threats Privacy

Source

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۷

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET report shared with The Hacker News ahead of publication, the sophisticated and modular tool is designed for

Malware & Threats Threat Intelligence

Source

Help Net Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۳:۳۰

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found the malware and named it Cereal. The toolset doesn’t need an attacker-owned server. Operators send commands to the victim’s internet-facing Exchange server, dressed up as o…

Malware & Threats Threat Intelligence

Source

Industrial Cyber سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۰:۰۴

CISA updates Cyber Incident Reporting form to improve threat intelligence analysis, national cyber defense

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released an updated cyber incident reporting form, an enhanced web-enabled... The post CISA updates Cyber Incident Reporting form to improve threat intelligence analysis, national cyber defense appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day IoT & OT Security

Source