#espionage

3 articles

FBI and DoJ dismantle Russian GRU campaign hijacking DNS via compromised routers

The FBI and DoJ neutralized a Russian GRU operation that exploited compromised home and SMB routers for DNS hijacking, espionage, and credential theft. Routers remain the weakest link in network security.

April 10, 2026

Threat Intelligence 5 min read

APT28 FrostArmada: MikroTik and TP-Link Routers Turned Into Espionage Relays

Russian group APT28 (Forest Blizzard) has been running the FrostArmada campaign since May 2025, compromising unsecured routers to build a covert espionage infrastructure targeting European and North American governments.

April 7, 2026

Threat Intelligence 3 min read

Chinese APT: a Dell zero-day silently exploited for 2 years

UNC6201 (China) exploited CVE-2026-22769 (CVSS 10.0) in Dell RecoverPoint since mid-2024 without detection. Three malware strains deployed, root persistence achieved.

March 28, 2026