GRU-Linked Router Breaches: Thousands Compromised

Threat actors exploited known vulnerabilities in TP-Link and MikroTik routers serving households and small businesses, redirecting DNS queries to harvest passwords and OAuth tokens at scale.