Russian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
Russia's Turla hacking group used a previously undocumented toolset to quietly steal emails from government networks in Kazakhstan and Romania, according to new research from ESET. The tools targeted Microsoft Exchange servers and were designed to leave minimal traces, making detection unusually difficult.
Why this matters: Government email is exactly where diplomats, officials, and policy staffers send information they never expect to become foreign intelligence. Turla's tools were built to stay quiet — no loud malware behavior, no easy flags for security teams. That means breaches could run for months before anyone notices. If a government's email is compromised this silently, so is the judgment of every official who thought their communications were private. Any country working with either Kazakhstan or Romania should assume some of that exposure extends to them too.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.