Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple high-impact cyber incidents and trends: Russia-linked military intelligence operators exploited known flaws in older Internet routers to mass-harvest Microsoft Office authentication tokens from users on more than 18,000 networks without deploying malware. Separately, German authorities identified and doxxed Daniil Shchukin as the operator “UNKN” behind REvil/GandCrab; an Iran-targeted worm called CanisterWorm is spreading via weak cloud deployments and wiping systems with Iran/Farsi settings; and an Iran-linked group claimed a wiper attack against medical device firm Stryker. Law-enf/