💨 Abstract

Russian hacking group Fancy Bear, linked to the GRU, has hijacked thousands of routers globally to steal passwords and access tokens. The group targeted unpatched routers from MicroTik and TP-Link, exploiting known vulnerabilities. The campaign, ongoing for years, affected at least 18,000 victims in 120 countries, including government and law enforcement agencies. The hackers redirected internet traffic to spoof websites to steal login credentials.

Courtesy: Lorenzo Franceschi-Bicchierai