What is APT28 and why are they targeting routers?

APT28 (aka Fancy Bear, GRU Unit 26165) is Russia's military cyber arm, hitting routers for stealthy credential theft via DNS redirects. Cheap, effective espionage.

How do I check if my router was hit by this DNS hijacking?

Log in, inspect DNS settings (should match ISP), run firmware updates, scan for odd traffic. Use tools like routerlogs or FBI IC3 report.

Will the FBI's Operation Masquerade protect routers worldwide?

No—just US portion. Global users: Patch now, disable remote access, consider upgrades. It's a blueprint, not a blanket.

🌐 Nation-State Threats

US FBI's Daring Router Raid Crushes Russia's DNS Spy Network

Imagine your trusty home router, that unassuming box humming in the corner, secretly funneling your data to Moscow. The US just shut that nightmare down—Operation Masquerade style.

theAIcatchup Apr 08, 2026 4 min read

FBI agents symbolically dismantling a network of compromised routers in Operation Masquerade against APT28

⚡ Key Takeaways

FBI's Operation Masquerade neutralized APT28's DNS hijacking on US routers across 23 states without user data harm. 𝕏
APT28 exploited SOHO routers like TP-Link for credential theft; users urged to update firmware and verify DNS. 𝕏
This takedown signals escalating US cyber retaliation against Russian GRU espionage, with AI defenses on the horizon. 𝕏

Published by

theAIcatchup

Threat intelligence. Zero noise.

#APT28 #DNS hijacking #FBI Operation Masquerade #Operation Masquerade #Russian GRU #Russian hackers

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by InfoSecurity Magazine

⚡ Key Takeaways

The 60-Second TL;DR

theAIcatchup

Share this article

Worth sharing?

Related Stories

GRU's Simple Router Trick Nabbed Microsoft Tokens from 18,000 Networks

FBI Crushes GRU's Router Snooping Scheme: DNS Tricks and Hacked Home Gear Exposed

APT28's FrostArmada: How Russian Spies Hijacked 18,000 Routers for Stealthy Global Espionage

APT28's Router Trap: How Russian Hackers Are Siphoning Your Secrets Through Everyday WiFi Gear

Stay in the loop