Skip to content
Briefings are running a touch slower this week while we rebuild the foundations.See roadmap
Timeline

GRU Unit 26165

Russian GRU military intelligence unit; attributed as APT28 operator responsible for 2026 SOHO router DNS-hijacking campaign.

1 of 1 entries (1 events, 0 interactions)

Filters
#17 Apr

Operated DNS hijacking campaign against enterprise Microsoft 365 credentials through compromised home routers

Cybersecurity: Threats and Defences: GRU hijacks home routers for M365 logins
← Back to GRU Unit 26165