A unit of the Russian GRU, known as APT28, is conducting hybrid warfare against Europe by hacking and compromising popular routers in government, logistics, and defense organizations. They spoof DNS settings to intercept passwords, digital keys, and redirect users to fraudulent websites, aiming to obtain secret information, conduct espionage, and destabilize critical systems. This systemic Russian cyber operation endangers ordinary users and key national infrastructures. Previously, APT28 targeted the German Bundestag, OPCW, and logistics companies. Cybersecurity experts note these attacks are widespread, initially targeting broad audiences, then focusing on high-value intelligence targets. Iran-backed hackers also increase cyberattacks on the US and allies, supported by Russian hacking networks. Protective measures include updating routers, strong passwords, and two-factor authentication.

A unit of the Russian GRU, known as APT28, is conducting hybrid warfare against Europe by hacking and compromising popular routers in government, logistics, and defense organizations. They spoof DNS settings to intercept passwords, digital keys, and redirect users to fraudulent websites, aiming to obtain secret information, conduct espionage, and destabilize critical systems. This systemic Russian cyber operation endangers ordinary users and key national infrastructures. Previously, APT28 targeted the German Bundestag, OPCW, and logistics companies. Cybersecurity experts note these attacks are widespread, initially targeting broad audiences, then focusing on high-value intelligence targets. Iran-backed hackers also increase cyberattacks on the US and allies, supported by Russian hacking networks. Protective measures include updating routers, strong passwords, and two-factor authentication.