Russian-Linked Turla Hackers Abuse Microsoft Exchange Infrastructure to Target Sensitive Communications

Russian-linked espionage group Turla has deployed a previously undocumented .NET malware toolkit that turns compromised Microsoft Exchange servers into surveillance platforms and command infrastructure. Named Cereal, the modular toolset intercepts selected emails while allowing legitimate messages to continue through the transport pipeline, concealing intelligence collection inside routine government communications. ESET disclosed the findings on November […]

Read the original article:

Russian-Linked Turla Hackers Abuse Microsoft Exchange Infrastructure to Target Sensitive Communications