Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
C CyberScoop ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The report shows that Turla is conducting state-linked email espionage with new, hard-to-detect Exchange tools, underscoring the persistent threat from Russian APTs.
Description
ESET has documented a new toolset called "Turla's Cereal" that targets Microsoft Exchange servers. The tools enable the silent theft of emails and exhibit few obvious indicators of compromise or useful telemetry. The report names the governments of Kazakhstan and Romania as victims. No CVE is assigned; the focus is on cyber espionage by an actor linked to the Russian state.
Risk score
- strategic relevance
- 0.85
Path: strategic