Freddy (@freddyzwo.bsky.social)

“The Russia-linked threat actor known as APT28 (aka Forest Blizzard) has been linked to a new campaign that has compromised insecure MikroTik and TP-Link routers and modified their settings to turn them into malicious infrastructure under their control as part of a cyber espionage campaign …”

loading . . .

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign APT28 exploits SOHO routers for global DNS hijacking and adversary-in-the-middle attacks, enabling credential theft and espionage. https://thehackernews.com/2026/04/russian-state-linked-apt28-exploits.html?m=1

22 days ago