Published • loading... • Updated
Russian government hackers broke into thousands of home routers to steal passwords
Officials said the campaign hit more than 5,000 consumer devices and let hackers steal credentials and emails from targeted networks.
- On Tuesday, the U.S. Justice Department and international partners executed "Operation Masquerade," a court-authorized disruption of a DNS-hijacking network controlled by Russia's GRU military intelligence unit.
- Since at least 2024, Russian intelligence unit Fancy Bear has exploited vulnerabilities in home and office routers, redirecting internet traffic through malicious DNS servers to intercept passwords, authentication tokens, and sensitive emails.
- Microsoft identified more than 200 organizations and 5,000 consumer devices impacted by the hacking operation, which primarily targeted TP-Link routers to compromise credentials connected to military, government, and critical infrastructure sectors worldwide.
- The FBI and Ukraine's Security Service urged users to perform factory resets, update firmware, and disable remote management on devices to secure systems against future exploitation by state-sponsored actors.
- Blocking more than 100 servers significantly weakened Russia's intelligence capabilities and prevented further interception of encrypted traffic, a persistent threat requiring continued vigilance from network defenders and device owners.
Insights by Ground AI
43 Articles
43 Articles
An Audacious Cyber Hack By Russian Military Intelligence Sets Off Global Alarms. Again.
Hackers connected to Russia’s military intelligence agency snuck into thousands Internet routers used in homes and offices worldwide and secretly monitored e-mail traffic and website logons and passwords for months, authorities said.
·Prague, Czechia
Read Full Article
Russian intelligence agencies continue hybrid war against Europe by hacking routers - Central Intelligence AgencyRussian intelligence agency attacks government and defense structures by spoofing DNS on routers. Hackers intercept passwords and spy on users.
·Kyiv, Ukraine
Read Full Article
Vulnerable TP-Link and MikroTik devices are used to intercept Internet traffic and access records.
·Kyiv, Ukraine
Read Full Article
Coverage Details
Total News Sources43
Leaning Left8Leaning Right6Center10Last UpdatedBias Distribution42% Center
Bias Distribution
- 42% of the sources are Center
42% Center
L 33%
C 42%
R 25%
Factuality
To view factuality data please Upgrade to Premium
