security: SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks
Microsoft Security Blog
2026-04-07
Microsoft says Forest Blizzard, a threat actor linked to the Russian military, is compromising insecure home and small-office routers and changing their settings to support malicious infrastructure. The activity includes DNS hijacking and adversary-in-the-middle attacks.