UK warns of Russian hacker threat targeting routers

The UK National Cyber Security Centre (NCSC) has issued a warning about potential data breaches caused by Russian hackers exploiting vulnerabilities in routers. The advisory was posted on the agency’s official website.

According to the NCSC, the Russian hacking group APT28 is targeting routers to seize control and steal passwords and other authentication data.

The hackers can manipulate Dynamic Host Configuration Protocol (DHCP) settings and Domain Name System (DNS) configurations, redirecting traffic through their own servers. This enables them to collect sensitive information from users connected to compromised networks.

The NCSC notes that the group operates unpredictably, initially targeting numerous devices before focusing on the most valuable and profitable ones.