Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple KrebsOnSecurity reports describe high-impact, active threats: Russia-linked military intelligence actors exploited known flaws in legacy Internet routers to mass-harvest Microsoft Office authentication tokens from users on >18,000 networks without deploying malware, enabling stealthy account access. Related coverage highlights the doxxing of “UNKN” (Daniil Shchukin), the former leader of GandCrab/REvil ransomware; a CanisterWorm wiper campaign targeting systems using Iran time/Farsi; an Iran-linked claimed wiper strike against medical device firm Stryker; and law enforcement takedowns