US federal agencies have disclosed that Russian military intelligence compromised thousands of small office and home routers, urging owners to take immediate protective measures.
The FBI and NSA revealed on April 7 that a GRU unit known as APT28 or Fancy Bear has targeted SOHO routers since at least 2024. The operation involved DNS hijacking to intercept credentials and communications, affecting devices across 23 states and impacting over 5,000 consumer devices plus 200 organizations according to Microsoft reports.