Authorities disrupt router DNS hijacks used to steal Microsoft 365 logins
From BleepingComputer to All on Tue Apr 7 12:34:57 2026
An international operation from law enforcement authorities in partnership with private companies has disrupted FrostArmada, an APT28 campaign hijacking local traffic from MikroTik and TP-Link routers to steal Microsoft account credentials. [...]