Signal
Submitted
Apr 28, 2026, 19:29 UTC
On April 8, 2026, the SBU and FBI announced dismantling a GRU hacking network hijacking Wi-Fi routers worldwide to steal sensitive data, targeting Ukrainian and Western government communications.
The Security Service of Ukraine (SBU), collaborating with the FBI and EU law enforcement, revealed on April 8, 2026, they had dismantled a Russian military intelligence GRU espionage operation exploiting vulnerable Wi-Fi routers globally, including Ukraine, the US, and EU. The GRU hackers from Military Unit 26165 (APT28/Fancy Bear) hijacked router traffic via DNS redirection to steal passwords, authentication tokens, emails, and intelligence on Ukrainian government/military correspondence and defense industry enterprises. Over 100 malicious servers were taken down and hundreds of Ukrainian routers liberated. The FBI traced the activity to GRU’s hacking division active since 2024, responsible for prior major cyberattacks worldwide, including US election interference, Western aid tracking to Ukraine, and spying on multiple governments and organizations. This operation disrupts a sophisticated espionage network designed for cyberattacks, sabotage, and intelligence collection against NATO allies and Ukraine.
Confidence: High
The article explicitly details a confirmed hostile Russian GRU espionage operation targeting networks worldwide, uncovered and disrupted by the SBU and FBI, indicating a clear aggressor signal in hybrid warfare cyber espionage.
Source URL
https://theins.press/en/news/291254
Source reliability
B
Info credibility
6
Event time
Apr 8, 2026, 00:00 UTC
Event time confidence
pm24h
Location
Cyberspace
Primary actor
85th Main Special Service Center of the Russian Defense Ministry
Country
Unknown
Tags
GRU, offensive cyber operations, APT28, Fancy Bear, Wi-Fi router hijacking, Russian military intelligence, SBU, FBI, Ukraine, Cyber attack, Information theft, Hybrid warfare
Nodes
Node 1: Borders, Node 2: 5th Column