www.g4media.ro/hackeri-rusi-afiliati-serviciului-s

Russian hackers from the Turla group targeted a Romanian government institution to intercept emails related to NATO and the EU. ESET reported that the attack was countered by Romania's SRI, which confirmed the incident. The hackers utilized a new malware toolkit named 'Cereal' to compromise Microsoft Exchange servers. ESET discovered the malware in late 2025, initially in Kazakhstan, and later in Romania, where it selectively collected emails involving NATO and EU representatives. Turla, linked to the Russian FSB, has been active for over two decades. SRI is actively investigating cyber threats from Russia and has implemented measures to mitigate such attacks.