Russian Hackers Breach UK Government Email Accounts in Major Cyberattack

Russian hackers, linked to APT28, have compromised email accounts of UK government and Foreign Office officials, utilizing DNS hijacking to intercept login credentials. The attack, identified as part of a broader campaign, exploited vulnerabilities in over 18,000 networks and targeted high-value officials. The breach allows unauthorized access to sensitive systems, with potential implications for national security and critical infrastructure. The National Cyber Security Centre (NCSC) has issued warnings and recommended mitigations, including firmware updates and two-step verification. The ongoing nature of the attack raises concerns about further infiltration and data harvesting. Dark web forums are reportedly trading access to the stolen credentials. The breach highlights the evolving tactics of state-sponsored cyber espionage.

Key Points: • APT28, a Russian hacking group, used DNS hijacking to steal UK government email credentials. • Over 18,000 networks were compromised, allowing access to sensitive government systems. • The NCSC has recommended immediate mitigations to protect against further exploitation.