NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

APT28 exploit routers to enable DNS hijacking operations

BACKGROUND
3 SIGNALSFIRST DETECTED 7 April 2026
Narrative synthesis pending — 3 signals collected.
How the story developed
Other feeds and industry voices
8 Apr
APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

The Russian threat actor known as APT28 (aka Forest Blizzard and Pawn Storm) has been linked to a fresh spear-phishing campaign targeting Ukraine and its allies to deploy a

REPORT · WHAT · The Hacker NewsOPEN STORY
7 Apr
UK exposes Russian military intelligence hijacking vulnerable routers for cyber attacks

New advisory warns cyber threat group APT28 have exploited vulnerable edge devices to support malicious operations.

REPORT · WHAT · NCSC UKOPEN STORY
8 Apr
Russian hacking group targets home and small office routers to spy on users

The FBI, NCSC, and Microsoft warn of an ongoing Russian campaign hijacking DNS settings on home and small office routers to spy on users.

REPORT · WHAT · Malwarebytes LabsOPEN STORY
8 Apr
Thousands of consumer routers hacked by Russia's military

End-of-life routers in homes and small offices hacked in 120 countries.

REPORT · WHAT · Ars TechnicaOPEN STORY
7 Apr
Russia Hacked Routers to Steal Microsoft Office Tokens

Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security

REPORT · WHEN · Krebs on SecurityOPEN STORY
Sources
TechCrunchThe Hacker NewsNCSC UK

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →