Advertisement
CRITICAL
Threat Intel
APT28 Exploits MikroTik & TP-Link Routers in DNS Hijacking
Russian state-linked APT28 (Forest Blizzard) is compromising insecure SOHO routers globally, employing DNS hijacking for cyber espionage since May 2025.
Runtime Rebel Intel
4 min read·Apr 7, 2026
TH
CRITICAL
Threat Intel
APT28 FrostArmada DNS Hijack Campaign Steals Microsoft 365 Logins
Authorities disrupt APT28's FrostArmada campaign, which used DNS hijacking of MikroTik and TP-Link routers to steal Microsoft 365 account credentials.
Runtime Rebel Intel
5 min read·Apr 7, 2026