https://labs.cosmicbytez.ca/news/2026-04-09-russias-forest-blizzard-nabs-rafts-of-logins-via-soho-routers
Russia's Forest Blizzard Harvests Logins via SOHO Router | CosmicBytez Labs
Apr 9, 2026 - Russia's APT28 (Forest Blizzard) is conducting a malwareless espionage campaign by modifying a single DNS setting in vulnerable SOHO routers to silently...
forest blizzardrussiaharvestsloginsvia