Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns

Multiple national cybersecurity agencies warn that Russian state-sponsored FSB Center 16 (aka Berserk Bear/Static Tundra) is actively hunting vulnerable routers worldwide by scanning for weak/default SNMP credentials and sometimes exploiting known Cisco vulnerabilities (notably CVE-2018-0171) to exfiltrate configurations via TFTP; the UK and EU have attributed late-2025 destructive attacks on Poland's energy grid to the group, issued sanctions against individuals/entities involved, and flagged the use of Lumma Stealer-derived credentials in espionage operations.