Malware
CerealRunner
- First Reported
- Nov 10, 2026
- Latest Reported
- Nov 10, 2026
Reported Context (2)
- CerealNeuron checks and decrypts the request, then executes the supplied CerealRunner program, a wrapper program that carries the code the attackers want to execute. Turla Uses Cereal Malware to Spy on Government Exchange Servers
- CerealRunner, which contains other encrypted binaries that are loaded and executed. ESET Uncovers Turla-Linked Cereal Toolset Targeting Exchange Servers
Malware (8)
Threat Actors (1)
MITRE ATT&CK (17)
Vendors (1)
Products (4)
Industries (3)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.