GoKawiil
Tech News
Researchers demonstrated that AI-assisted methods can unpack, map and recreate the internal workings of complex software, including the Turla malware family. The work shows reverse engineering tasks that once required specialized expertise and significant time can now be accelerated substantially using AI tools.
ESET researchers say the Russian state-backed hacking group Turla deployed a new .NET-based toolset called Cereal to intercept emails from Microsoft Exchange servers at government organizations, first spotted in Kazakhstan and later at a Romanian government agency compromised on December 23, 2025. The malware, including a component called CerealBox, injects into Exchange's mail-processing process to covertly read messages containing document attachments and correspondence tied to NATO and EU officials without disrupting normal mail flow.