Russia Hacked Routers to Steal Microsoft Office Tokens

A set of high-impact security incidents and trends: Russian military-linked actors exploited known flaws in older consumer/edge routers to harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware; German authorities published the identity (Daniil Shchukin) of "UNKN," linked to REvil and GandCrab; a financially motivated group unleashed the CanisterWorm wiper targeting systems configured for Iran time zone or Farsi; U.S., Canadian and German authorities disrupted four large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had compromised >3 million+