APT28 Targets SOHO Routers in Global DNS Hijacking Attack

Date:

Cybersecurity Alert: Major Malware Campaign Targets Routers Worldwide

A new cyber espionage campaign, dubbed FrostArmada, has been linked to the Russian hacking group APT28, also known as Forest Blizzard. This attack has compromised MikroTik and TP-Link routers, allowing hackers to hijack DNS traffic and collect sensitive data from users.

Since May 2025, the attackers have targeted over 5,000 consumer devices and more than 200 organizations, primarily government agencies and cloud service providers across various regions, including North Africa and Southeast Asia. At its peak, the campaign affected over 18,000 unique IP addresses.

To protect yourself, ensure your router firmware is up to date, change default settings, and use secure passwords.

Risk Level: High. This incident highlights the need for vigilance in securing home and office networks against increasingly sophisticated attacks.

Source: View Original Report

Share post:

spot_imgspot_img

Popular

More like this
Related

WPScan 4.0.0: Critical XSS Vulnerability Exposed!

WordPress Vulnerability Report: WPScan 4.0.0 Released Introduction The latest version of...

119 Edge Extensions: Malware Disguised as Useful Tools

Cybersecurity Alert: Malware Infiltrates Popular Browser Extensions A recent malware...

200K WordPress Sites Face XSS Risk from Burst Statistics Plugin

Critical Vulnerability Discovered in Burst Statistics Plugin for WordPress On...

Foxconn Cyberattack: Nitrogen Ransomware Strikes WordPress Sites

Cyberattack Hits Foxconn: Major Data Breach Reported Foxconn, the largest...