www.antena3.ro/actualitate/sri-confirma-ca-hackeri

The Romanian Intelligence Service (SRI) confirmed a cyber attack attributed to the Russian APT Turla group in December 2025, which exploited vulnerabilities in Microsoft operating systems. The attack was halted by the National Cyberint Center, with no sensitive data breaches reported. SRI has informed legal beneficiaries and cooperated with European intelligence partners regarding the incident. Ongoing investigations are targeting other related cyber campaigns linked to Russia. ESET researchers identified a new toolset named 'Cereal' used in the attack, aimed at collecting emails related to NATO and the EU, confirming the involvement of APT Turla.