Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple high-impact cyber campaigns and developments were reported: Russia-linked operators exploited known flaws in older consumer/enterprise routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware; a new phishing‑as‑a‑service (“Starkiller”) proxies real login pages to capture credentials and MFA codes; and several giant IoT botnets (Kimwolf, Aisuru, JackSkid, Mossad) that compromised millions of devices powered record DDoS attacks (with partial law‑enforcement disruption of their infrastructure). Separately, Iran‑linked actors (and“