Skip to content
You can now search across every topic, entity and event.What's new
Timeline

APT28

Russian GRU military intelligence cyber unit; attributed with DNS-hijacking home routers to steal Microsoft 365 credentials.

9 of 9 entries (5 events, 4 interactions)

Filters
#109 Jul

NCSC names FSB Centre 16 over routers

Cybersecurity: Threats and Defences
#223 Apr

Sixteen agencies put IOC extinction in print

Cybersecurity: Threats and Defences
#223 Apr

Mentioned in: Norway joins the Salt Typhoon victim list

Cybersecurity: Threats and Defences
#17 Apr

Exploited SOHO routers to hijack DNS and harvest Microsoft 365 OAuth tokens via adversary-in-the-middle attacks since 2024

Cybersecurity: Threats and Defences: GRU hijacks home routers for M365 logins
#17 Apr
Attacked→MMikroTik
“exploited soho router”
Cybersecurity: Threats and Defences · source event
#17 Apr
Attacked→TWTP-Link WR841N
“exploited soho router”
Cybersecurity: Threats and Defences · source event
#17 Apr
Published by←FFBI
“issued coordinated psa”
Cybersecurity: Threats and Defences · source event
#17 Apr
Published by←NNCSC
“published attribution advisory”
Cybersecurity: Threats and Defences · source event
#131 Mar

Targeted messaging app accounts of high-risk individuals using contact impersonation techniques

Cybersecurity: Threats and Defences: Signal, WhatsApp hit by three states
← Back to APT28