The FBI and the Justice Department have identified a Russian military intelligence hacking group, known as APT28, that exploited vulnerabilities in small office and home office routers to conduct espionage. This operation allowed the group to manipulate router settings, facilitating the monitoring of internet traffic and the theft of sensitive information.
In April, U.S. authorities disrupted a significant portion of this hacking network, which had been leveraging outdated routers commonly used by small businesses and remote workers. By altering DNS settings, hackers could redirect internet requests through servers they controlled, effectively capturing valuable data such as passwords and emails.
Despite the disruption, the FBI emphasizes that users must take responsibility for securing their devices. Law enforcement cannot directly intervene to update router settings or change default passwords. Regular checks and updates are essential for maintaining cybersecurity.