UK exposes Russian cyber unit hacking home routers to hijack internet traffic

The UK NCSC warns that APT28 (aka Fancy Bear/Unit 26165) is conducting a broad campaign exploiting vulnerable SOHO routers—including some TP‑Link models—by abusing weak SNMP v2 community strings and known firmware flaws to change DNS settings, intercept traffic, and redirect users to malicious sites; the activity is opportunistic at scale and the advisory urges securing management interfaces, restricting/disabling SNMP, and applying updates.