Related Threat Clusters

GRU Compromises Home Routers in 23 States to Steal Outlook Credentials
The FBI and partners disrupted a covert network of compromised TP-Link and MikroTik routers exploited by the Russian GRU (APT28) to steal Outlook credentials. This operation, known as Operation Masquerade, revealed that…

6 articles · Updated May 22, 2026
APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…

100 articles · Updated April 7, 2026

Recent Intelligence Reports

GRU Hijacked TP-Link Routers in 23 States to Steal Outlook Passwords: FBI Urges Immediate Action — Techtimes · May 21, 2026
US operation evicts Russia from hacked SOHO routers used to breach critical infrastructure — Cybersecuritydive · April 8, 2026
US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers — Infosecurity-Magazine · April 8, 2026
FBI Disrupts Russian Router Hijacking Operation Compromised Thousands of Users — Cybersecuritynews · April 8, 2026
FBI Takes Down APT28 Network Behind Global DNS Hijacking Attacks — Thecyberexpress · April 8, 2026
Home and office routers across US were targets of Russian hackers, Boston FBI office says — Bostonglobe · April 8, 2026
Feds quash widespread Russia-backed espionage network spanning 18,000 devices — Cyberscoop · April 7, 2026
Operation Masquerade: U.S. Disrupts Russian DNS Hijacking Network — Devdiscourse · April 7, 2026

Apt28 Fancy Bear Forest Blizzard GRU Kazuar Pawn Storm Sednit Sofacy Strontium Data Breach Malware Man-in-the-Middle