Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

Nov 10, 2026

The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that’s used to break into victims’ Microsoft Exchange servers with an aim to surreptitiously collect emails.

According to an ESET report shared with The Hacker News ahead of publication, the sophisticated and modular tool is designed for

Get Free Report & Network Analysis

Please check your email for the free report.