EPISODE · Apr 9, 2026 · 0 MIN
US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking
from Security Stuff · host Trace3
US authorities have successfully disrupted a Russian espionage operation where hackers from APT28, also known as Fancy Bear and believed to be linked to Russia's military intelligence, compromised thousands of home and small office routers to intercept sensitive data. The attackers exploited vulnerabilities in TP-Link and MikroTik routers to alter DNS settings, enabling them to harvest passwords, authentication tokens, and emails through adversary-in-the-middle attacks that affected over 200 organizations and 5,000 consumer devices. Microsoft, Lumen Technologies, and UK cyber authorities collaborated with the FBI in the takedown, with activity peaking in December when over 18,000 unique IP addresses from 120 countries were detected communicating with the malicious infrastructure.
Embed this episode
What this episode covers
US authorities have successfully disrupted a Russian espionage operation where hackers from APT28, also known as Fancy Bear and believed to be linked to Russia's military intelligence, compromised thousands of home and small office routers to intercept sensitive data. The attackers exploited vulnerabilities in TP-Link and MikroTik routers to alter DNS settings, enabling them to harvest passwords, authentication tokens, and emails through adversary-in-the-middle attacks that affected over 200 ...
NOW PLAYING
US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking
No transcript for this episode yet
Similar Episodes
No similar episodes found.
Similar Podcasts
No similar podcasts found.