Russian government hackers broke into thousands of home routers to steal passwords | TechCrunch

"Fancy Bear has compromised thousands of routers globally, exploiting vulnerabilities in devices from MicroTik and TP-Link to redirect internet traffic and steal sensitive information."

"The operations are likely opportunistic, casting a wide net to reach many potential victims before narrowing in on targets of intelligence interest."

"By modifying router settings, the hackers can redirect victims to spoof websites, allowing them to capture passwords and access tokens without needing two-factor authentication."

"The campaign has affected at least 18,000 victims in around 120 countries, highlighting the extensive reach and impact of this hacking operation."

A Russian hacking group, Fancy Bear, has compromised thousands of home and small business routers worldwide to redirect internet traffic and steal sensitive information. Targeting unpatched routers from MicroTik and TP-Link, the hackers exploited known vulnerabilities. The operations are opportunistic, aiming to reach many potential victims before focusing on specific targets. By modifying router settings, the hackers can redirect users to fraudulent websites, allowing them to capture passwords and access tokens without needing two-factor authentication. The campaign has affected at least 18,000 victims across 120 countries.

Read at TechCrunch