Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple KrebsOnSecurity posts describe a range of high-impact cyber activity: Russian military-linked actors exploited known flaws in older Internet routers to mass-harvest Microsoft Office authentication tokens from users on more than 18,000 networks without deploying malware; a new phishing‑as‑a‑service called “Starkiller” proxies real login pages and relays MFA codes to defeat multi‑factor protections; massive IoT botnets (Kimwolf, Aisuru, JackSkid and Mossad) comprising millions of compromised devices were disrupted by law enforcement after being used for record DDoS attacks and for evict