Russian GRU Compromised 18,000+ Routers for Mass Token Harvesting

Russian military intelligence (GRU/APT28) hijacked DNS settings on 18,000+ vulnerable routers to intercept Microsoft OAuth tokens from 200+ orgs, bypassing MFA without malware.