Do Son Russian-linked Forest Blizzard's FrostArmada campaign hijacked 18,000+ routers to steal OAuth tokens via DNS redirection. Learn how they stayed invisible.
Forest Blizzard
Microsoft exposes Forest Blizzard’s hijacking of 5,000+ SOHO routers for DNS spying and AiTM attacks on Microsoft 365 and governments. Patch your router now!
Pawn Storm (APT28) debuts the PRISMEX suite, weaponizing Office zero-days against NATO logistics. Discover the stealth tactics behind this 2026 offensive.
APT28's "Operation MacroMaze" targets Europe using Spanish gov decoys. The campaign uses "low-tech" macros & Webhook.site to evade detection.
The United States has formally denounced a series of cyberattacks orchestrated by Russia’s GRU, commonly identified as APT28
The report highlights an alarming trend where cybercriminals and Advanced Persistent Threat (APT) groups, such as Pawn Storm
Forest Blizzard has leveraged GooseEgg to exploit a critical vulnerability in the Windows Print Spooler service, identified as CVE-2022-38028
Pawn Storm adopted a unique approach, sending spear-phishing emails with a small information stealer as an attachment
Protect your business from the powerful cyber threats of state-sponsored Russian group, Forest Blizzard. As Microsoft tracks their exploits, uncover the group's tactics & targets to secure your data.