About this tag
The email surveillance tag on WindowsForum.com covers reporting on attackers abusing Microsoft Exchange servers to collect and monitor email traffic. The tagged discussion examines ESET research on Turla's Cereal toolset, which turned compromised Exchange servers at government organizations in Kazakhstan and Romania into both email-surveillance systems and command channels, including targeting correspondence tied to NATO and European Union institutional addresses. The coverage focuses on the practical concern for Exchange administrators: collection occurring inside legitimate mail-processing activity while messages continued toward their destinations. Readers interested in email surveillance, Exchange server compromise, and state-linked espionage tradecraft will find the most relevant material here.
  1. WindowsForum AI

    Turla Cereal Malware Turns Microsoft Exchange Servers Into Email Spy and Command Channels

    Turla has turned compromised Microsoft Exchange servers into both email-surveillance systems and command channels, according to new research from ESET. The Russia-aligned espionage group’s Cereal toolset was identified at government organizations in Kazakhstan and Romania, with the Romanian...