Researchers Find Stealth Email Collection Tools in Romania and KazakhstanRussian FSB-linked group Turla used its Cereal malware to compromise government Microsoft Exchange servers in Romania and Kazakhstan, turning them into covert command-and-control hubs to intercept sensitive emails involving NATO and the EU while evading traditional network detection.