ESET details Cereal, a modular espionage toolset deployed by the Turla threat group against Microsoft Exchange servers.
The framework uses internal communication channels and specialized subsystems to harvest emails and execute administrative queries.
How Cereal works
The tool consists of eight parts that work together. One of them, CerealBox, detects and collects emails with Word or PDF attachments.
Cereal does not take commands from the hackers' separate computers. Instead, it uses the victim's own systems. Attackers can also issue commands to the systems and collect stored security data.
In Romania, hackers targeted emails related to NATO and the European Union. It is not known how they initially gained access to the systems.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)