🐻 Russia Stole Microsoft Tokens from 18,000 Hacked Routers 🐻
Russian military intelligence unit APT28 (Forest Blizzard) compromised over 18,000 Internet routers to conduct a massive DNS hijacking campaign that stole Microsoft Office authentication tokens from 200+ organizations and 5,000 consumer devices. The state-sponsored hackers exploited vulnerabilities in older TP-Link and MikroTik routers to redirect DNS traffic through attacker-controlled servers, intercepting OAuth tokens after users c...