Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple high-impact cyber incidents reported: Russia-linked actors (military intelligence–linked) exploited known flaws in older consumer/enterprise routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware; German authorities unmasked Daniil Maksimovich Shchukin (‘UNKN’), alleged leader of GandCrab and REvil ransomware campaigns; a financially motivated group deployed ‘CanisterWorm’, a wormy cloud-service wiper targeting systems using Iran time zone/Farsi; U.S., Canadian and German authorities disrupted four massive IoT botnets (Aisuru