Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments

Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report. The post Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments appeared first on CyberScoop.

هوش تهدید
خواندن متن کامل در CyberScoop درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
The Hacker News

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET report shared with The Hacker News ahead of publication, the sophisticated and modular tool is designed for

Help Net Security

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found the malware and named it Cereal. The toolset doesn’t need an attacker-owned server. Operators send commands to the victim’s internet-facing Exchange server, dressed up as o…

Industrial Cyber

CISA updates Cyber Incident Reporting form to improve threat intelligence analysis, national cyber defense

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released an updated cyber incident reporting form, an enhanced web-enabled... The post CISA updates Cyber Incident Reporting form to improve threat intelligence analysis, national cyber defense appeared first on Industrial Cyber.