WhisperX tag archive

#GRU

This page collects WhisperX intelligence signals tagged #GRU. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (3)

The Network · 2026-04-07 17:27:25 · Forest Blizzard (APT28 / GRU)

1. Russia's GRU-Linked 'Forest Blizzard' Hacks Routers to Steal Microsoft Office Tokens from 18,000+ Networks

Russian military intelligence hackers have executed a stealthy, large-scale espionage campaign by exploiting old router vulnerabilities to steal Microsoft Office authentication tokens from users on more than 18,000 networks. The operation, attributed to the GRU-linked group known as Forest Blizzard (or APT28/Fancy Bear...

The Network · 2026-04-08 12:26:56 · APT28 (Russian Military Intelligence)

2. Russia's GRU APT28 Hacks 18,000+ Consumer Routers, Redirects Traffic for Espionage

Russia's military intelligence unit, APT28, has commandeered tens of thousands of consumer routers worldwide, weaponizing them to redirect unsuspecting users to credential-harvesting sites. Researchers from Lumen Technologies' Black Lotus Labs report that between 18,000 and 40,000 routers, primarily from MikroTik and T...

The Network · 2026-04-08 23:27:00 · ZeroHedge

3. DOJ, FBI Disrupt Russian GRU Unit's Botnet Targeting US Military, Government, Critical Infrastructure

The US Justice Department and FBI have executed a court-authorized technical operation to dismantle a segment of a botnet built from compromised American routers, a network directly controlled by a notorious Russian military intelligence unit. This action neutralized a key tool used for global DNS hijacking operations,...