Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple high-impact cyber incidents and trends were reported: Russian military-linked hackers exploited known vulnerabilities in legacy routers to mass-harvest Microsoft Office authentication tokens from users on >18,000 networks without deploying malware; German authorities identified and doxed “UNKN” (Daniil Shchukin), alleged leader of GandCrab and REvil; a worm named “CanisterWorm” is spreading via poorly secured cloud services and wiping data on systems set to Iran time/Farsi; the U.S., Canada and Germany disrupted four major IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had ensl‑