Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple high-impact incidents and research briefs: Russian state-linked hackers exploited known vulnerabilities in older home/ISP routers to harvest Microsoft Office authentication tokens from users on over 18,000 networks without deploying malware. German authorities publicly identified Daniil Maksimovich Shchukin (aka “UNKN”) as the alleged leader of GandCrab/REvil linked to numerous extortion incidents. A financially motivated group deployed ‘CanisterWorm,’ a worming wiper that spreads via poorly secured cloud services and targets systems using Iran time zone or Farsi locale. U.S., Canada,