Turla hackers use new Cereal malware to spy on govt Exchange servers

The Russian state-sponsored threat group Turla is deploying a new toolset called Cereal to intercept email communications on Microsoft Exchange servers belonging to government organizations. Administrators are advised to audit servers for unauthorized access and suspicious activity.