Russia Hacked Routers to Steal Microsoft Office Tokens

Multiple KrebsOnSecurity reports describe a wave of high-impact cyber activity: Russian military-intel-linked actors exploited known flaws in older consumer and enterprise routers to mass-harvest Microsoft Office authentication tokens from users on over 18,000 networks without deploying malware; separate reporting covers doxxing of a suspected REvil/GandCrab leader (UNKN/Daniil Shchukin), a worm-like wiper (“CanisterWorm”) targeting Iran, and an Iran-linked wiper claim against medtech firm Stryker. U.S., Canadian and German authorities disrupted four large IoT botnets (Aisuru, Kimwolf, JackSk2