Russia Hacked Routers to Steal Microsoft Office Tokens

A collection of KrebsOnSecurity stories covering multiple high-impact cyber threats and developments: Russian state-linked actors exploited vulnerabilities in older consumer routers to mass-harvest Microsoft Office authentication tokens from >18,000 networks; German authorities publicly identified “UNKN” (Daniil Shchukin) as the operator behind GandCrab/REvil; a wormy wiper (CanisterWorm) and Iran-linked actors targeted Iranian/timezone-Farsi systems and the medtech firm Stryker; global law enforcement disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had compromised