Breaches

Russian APT28 Hackers Hijack DNS on 18,000 Routers to Steal

April 07, 2026 1 min read 16 views
cybersecurity investigation news
Russian state-backed group Forest Blizzard (APT28) compromised over 18,000 SOHO routers by hijacking DNS settings to intercept Microsoft Office authentication tokens without using malware.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.