Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple KrebsOnSecurity reports describe a wave of high-impact cyber activity: Russian military-linked actors exploited known vulnerabilities in older Internet routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware; large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that compromised millions of devices were disrupted by law enforcement; a stealthy phishing-as-a-service (“Starkiller”) proxies real login pages and relays credentials and MFA codes; wiper campaigns (including ‘CanisterWorm’ and a claimed attack on Stryker) are active,