#2
SecurityWeek
general
April 08, 2026 at 10:54 UTC
US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking
By Eduard Kovacs
AI Summary
U.S. authorities disrupted APT28's operation exploiting vulnerable TP-Link and MikroTik routers across 120 countries to conduct adversary-in-the-middle attacks for credential theft. The Russian military hackers modified router DNS settings to hijack traffic and steal Microsoft 365 logins, demonstrating how end-of-life consumer devices become strategic intelligence assets.
Relevance score: 94.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →