News
Turla’s Cereal toolset turns Exchange servers into C2
New Cereal toolset hijacks Exchange OWA, Autodiscover, and ActiveSync to receive encrypted commands, with modules injecting into EdgeTransport.exe and copying messages from NATO/EU addresses.