RICHTVX NEWS logoRICHTVXNEWS
Turla hackers use new Cereal malware to spy on govt Exchange servers
◉ BLEEPINGCOMPUTER · CYBERSECURITY · RT-8791AD

Turla hackers use new Cereal malware to spy on govt Exchange servers

⌖ BLEEPINGCOMPUTER⏱ ✓ SOURCE · bleepingcomputer.com/news/securit…SHA-256 C3BCC121·12BE5C09

BLEEPINGCOMPUTER — The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]

CODE
RT-8791AD
PUBLISHER
BleepingComputer
TOPIC
Cybersecurity
PUBLISHED
10 November 2026 · 10:04 UTC
FIRST SEEN
10 November 2026 · 10:15 UTC
ORIGINAL
https://www.bleepingcomputer.com/news/security/turla-hackers-use-new-ceral-malware-to-spy-on-govt-exchange-servers/
SHA-256
c3bcc12112be5c09ec022835e3425d74311a4ee69f4724725a9be9e27ac9c249

The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.

Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.

More from BLEEPINGCOMPUTER

Ransomware recovery is now a client retention metricRT-74F31C · CYBERSECURITY

← Back to the news · The archive

GUARDED BY CERBERUSSCANNED BY WIREKNOX GUARD★ ADD AS A PREFERRED SOURCE ON GOOGLE