Russian Turla Hackers Deploy New Cereal Malware Against Exchange Servers

The Russian state-sponsored threat group Turla is utilizing a previously undocumented modular malware called Cereal. The tool is engineered to compromise Microsoft Exchange servers and stealthily harvest emails for espionage purposes, posing a significant threat to organizations relying on on-premises mail infrastructure.