Timeline
APT28
Russian GRU military intelligence cyber unit; attributed with DNS-hijacking home routers to steal Microsoft 365 credentials.
2 events
Filters
#117 Apr
Exploited SOHO routers to hijack DNS and harvest Microsoft 365 OAuth tokens via adversary-in-the-middle attacks since 2024
Cybersecurity: Threats and Defences: GRU hijacks home routers for M365 logins#117 Apr