Russia Hacked Routers to Steal Microsoft Office Tokens

A series of KrebsOnSecurity reports detail multiple high-impact incidents: Russia-linked actors exploited known flaws in older routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware; a new phishing-as-a-service named “Starkiller” proxies real login pages to capture credentials and MFA codes; the massive Kimwolf and other IoT botnets disrupted services (including I2P) and were the subject of international enforcement actions dismantling botnet infrastructure; the CanisterWorm wiper spreads via insecure cloud services and targets hosts/