Timeline
APT28
Russian GRU military intelligence cyber unit; attributed with DNS-hijacking home routers to steal Microsoft 365 credentials.
12 of 12 entries (8 events, 4 interactions)
Filters
#12 26 Jul
One firm hedged, heise online named APT28
Cybersecurity: Threats and Defences#12 22 Jul
Mentioned in: Hotel WiFi steers guests to fake logins
Cybersecurity: Threats and Defences#10 9 Jul
NCSC names FSB Centre 16 over routers
Cybersecurity: Threats and Defences#8 23 Jun
Triple CVSS-10 Ubiquiti chain hits root
Cybersecurity: Threats and Defences#2 23 Apr
Mentioned in: Norway joins the Salt Typhoon victim list
Cybersecurity: Threats and Defences#2 23 Apr
Sixteen cyber agencies name Flax Typhoon network
Cybersecurity: Threats and Defences#1 7 Apr
Exploited SOHO routers to hijack DNS and harvest Microsoft 365 OAuth tokens via adversary-in-the-middle attacks since 2024
Cybersecurity: Threats and Defences: GRU hijacks home routers for M365 logins#1 7 Apr
#1 7 Apr
#1 7 Apr
#1 7 Apr
#1 31 Mar