SOHO routers

The FBI and Justice Department warned that Russian hackers linked to the GRU exploited vulnerabilities in outdated SOHO routers to conduct espionage by altering DNS settings and intercepting traffic. The hackers redirected internet requests through their servers to steal sensitive data, and authorities disrupted the U.S. portion of the network in April.

Russia's APT28 group is conducting cyber espionage by exploiting vulnerable SOHO routers through modified DNS settings, enabling fileless and malwareless attacks on global organizations. The technique allows unauthorized access without traditional malware deployment.