Russia's APT28 behind latest wave of router, DNS attacks
… It said APT28, aka Fancy Bear, a group widely attributed to Russian intelligence GRU , is exploiting vulnerabilities in small and home office SOHO routers and changing their DNS server settings to redirect victims to websites it controls. …