What was Operation Masquerade?

FBI's court-backed op to neuter GRU's TP-Link router botnet, resetting DNS and blocking spy access across 23 states.

Are TP-Link routers safe now?

Safer—FBI fixed compromised ones, but update firmware and change defaults to stay ahead of copycats.

How do Iranian hackers target PLCs?

Exploit exposed OT devices like Allen-Bradley controllers, injecting disruptions via vulns for real-world chaos in U.S. infrastructure.

🌐 Nation-State Threats

FBI Wipes Russian Spy Routers Clean as Iran Hammers U.S. Factory Controls

Midnight commands from the FBI just purged thousands of TP-Link routers of Russian spyware. But Iran's hitting U.S. factories hard—welcome to cybersecurity's brutal week 15.

CVE Watch Apr 11, 2026 4 min read

FBI operation disrupting Russian-compromised TP-Link routers with digital network visualization

⚡ Key Takeaways

FBI's Operation Masquerade dismantled a massive GRU DNS hijack on TP-Link routers, a rare clean win. 𝕏
Mac attackers bypassed Apple's ClickFix with Script Editor lures, delivering AMOS infostealer smoothly. 𝕏
Iranian APTs disrupted U.S. PLCs in critical sectors, signaling bolder OT attacks ahead. 𝕏

Published by

CVE Watch

Threat intelligence. Zero noise.

#APT28 #GRU router hijack #Iranian OT attacks #macOS ClickFix bypass

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by SentinelOne Blog

⚡ Key Takeaways

The 60-Second TL;DR

CVE Watch

Share this article

Worth sharing?

Related Stories

APT28's PRISMEX Sneaks Into Ukraine's Veins, Wiping Emergency Lifelines

Fancy Bear's 2023 Rampage: 100+ Targets, No Sophistication Required

APT28 Turns Your Home Router into Russia's Spy Tool

US Crushes APT28's Sneaky Router Takeover Plot

Stay in the loop