The Kazakhstan flag is shown before the finals of Kok-boru
Finals against Kyrgyzstan during the World Nomad Games at the Hippodrome Racetrack on September 6, 2026 in Cholpon-Ata, Kyrgyzstan. Turla, a notorious cyberespionage group aligned with the Russian government, has been wielding a new, customizable toolset to compromise governments around the world over the past year, including Kazakhstan. (Photo by Mitchell Layton/Getty Images)
Nicknamed “Turla’s Cereal,” the tools target Microsoft Exchange servers and lack many obvious indicators of compromise or malicious telemetry, per a new ESET report.
Wanda Jones-Heath (left),
Principal Cyber Advisor, Dept. of Air Force, talks with Rick Stewart, Sr. Engineer at Datadog, at the Threat Response Forum on Thursday, Nov. 5, 2026. (Carlin Fisher/Scoop News Group)
Videostrong sold TV set-top boxes and other devices with pre-installed malware. The yearslong operation evaded Google’s security tests and established a botnet for cybercriminals.
Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed.
The 62-year-old allowed co-conspirators to use his identity and top secret security clearance to apply for almost 100 jobs last year. The scheme’s success rate was limited.
The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks.
The U.S. District of Columbia’s Scam Center Task Force, the FBI’s field office in Honolulu and the U.S. Attorney’s Office for the District of Alaska made a trip to Madagascar in August to review electronic devices seized from scam compounds. (Getty Images)