Russia's Military Hackers Targeted Home Routers Across 23 States. Here's What to Do

https://www.cnet.com/a/img/resize/abb617d0234d07eee7a544c2c5ab2a8013710c70/hub/2026/04/14/2b4a63a6-f2b4-420a-862b-d53b8e7e0c55/gettyimages-2210715954.jpg?auto=webp&fit=crop&height=675&widt...

Federal agencies disrupted the attack but were direct about what comes next. These five router security steps are the responsibility of individual owners.

5 min read

For years, a unit of Russia's military intelligence agency quietly turned ordinary home routers into tools of espionage. The GRU group known as APT28, the same outfit behind the 2016 DNC hack and a string of attacks on NATO targets, exploited unpatched firmware and unchanged default passwords to compromise thousands of devices across 23 US states, redirecting internet traffic through servers under Russian control and harvesting credentials along the way. Federal agents disrupted the operation in April under a court order. What they couldn't do from a distance was fix the underlying vulnerabilities. That requires five steps from you.

The attack targeted small-office/home-office routers, also known as SOHO routers, and was carried out by a unit in the Russian military intelligence agency, the GRU....

Copyright of this story solely belongs to cnet.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/VnoVVXTmAmxSBYBe4LUwVW-1919-80.jpg

New lightweight, self-propagating crypto stealing malware delivered by USB spotted by Microsoft researchers – Crypto Clipper script-based stealer hunts for vulnerable wallets

* Microsoft warns of “Crypto Clipper,” a worm spreading via malicious .LNK files on USB drives * Malware maintains persistence, connects to Tor C2, enables remote code execution, and steals clipboard crypto data * It swaps wallet addresses, exfiltrates seed phrases/private keys, and uploads screenshots to assess target value Microsoft is warning