Russia Hacked Routers to Steal Microsoft Office Tokens

State-backed Russian hackers exploited known vulnerabilities in older Internet routers to harvest Microsoft Office authentication tokens from users on over 18,000 networks. This campaign did not involve deploying malware or malicious code, instead relying on router flaws to intercept tokens. The activity enables unauthorized access to Microsoft Office accounts by capturing authentication credentials in transit. The threat is assessed as low severity due to the reliance on older router vulnerabilities and the absence of active malware deployment. No specific patch information or vendor advisories are provided in the available data.

• krebsonsecurity.com/2026/04/russia-hacked-routers-to-steal-microsoft-office-tokens/ (opens in a new tab)