Frequency
2
occurrences
First Seen
April 7, 2026
Last Seen
June 11, 2026
Related Threat Clusters
-
APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…
100 articles · Updated April 7, 2026 -
Resurgence of KV Botnet Linked to Chinese State Actors
Chinese operatives have revived the KV-botnet, a covert data transfer network previously dismantled by the FBI in January 2024. The botnet, which primarily exploits vulnerable routers and IoT devices, has seen a…
2 articles · Updated June 11, 2026
Recent Intelligence Reports
- Chinese agents caught rebuilding botnets and stirring the pot on AI datacenter debate — Theregister · June 11, 2026
- Authorities disrupt router DNS hijacks used to steal Microsoft 365 logins — Ground.News · April 7, 2026