# Turla hackers use new Cereal malware to spy on govt Exchange servers

> HelixNews · Web page: https://helixnews.one/story/6059 · All pages for agents: https://helixnews.one/llms.txt

1 outlet covering · First listed: BleepingComputer, Nov 10, 2026, 4:04 AM · Read it: <https://www.bleepingcomputer.com/news/security/turla-hackers-use-new-ceral-malware-to-spy-on-govt-exchange-servers/>

The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations.

## Who's covering it

In the order they published:

- Nov 10, 2026, 4:04 AM: [Turla hackers use new Cereal malware to spy on govt Exchange servers](<https://www.bleepingcomputer.com/news/security/turla-hackers-use-new-ceral-malware-to-spy-on-govt-exchange-servers/>) — BleepingComputer (Specialist, United States)
  The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations.