logo

Feds quash widespread Russia-backed espionage network spanning 18,000 devices

ID: 617ceea3-927d-5bb7-9ac4-40eb3f381d89

STIX ID: report--617ceea3-927d-5bb7-9ac4-40eb3f381d89

Feed Name: CyberScoop

Threat Score
90/100

Date Published: 2026-04-07

Date Updated: 2026-04-21

Author: Matt Kapko

...
...

Forest Blizzard (APT28/Fancy Bear) conducted a widespread router compromise and DNS-hijacking espionage campaign that affected more than 18,000 routers across 120+ countries and intruded into systems of over 200 organizations, intercepting passwords, OAuth tokens and other credentials to target government, military and critical infrastructure; a coordinated remediation led by the FBI (Operation Masquerade) with Microsoft and Lumen reportedly halted the campaign.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.