Hackers linked to Russia’s military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens from users on more than 18,000 networks without deploying any malicious software or code.
Microsoft sa...
This incident highlights a persistent vulnerability in global cybersecurity: the exploitation of outdated hardware by state-backed actors. The attack’s simplicity—leveraging DNS hijacking rather than sophisticated malware—underscores how low-tech methods can still yield high-impact results, especially when targeting unpatched systems. The reliance on user error (ignoring TLS warnings) reveals a systemic weakness in security education and default configurations. While the FCC’s ban on foreign-mad...