Russia's Fancy Bear still attacking routers to boost fake sites (theregister.com)

• Exploitation of SOHO hardware to create distributed attack vectors.
• Traffic interception for illicit content redirection.
• Strategic use of compromised infrastructure for persistent operations.

"State-sponsored actor Fancy Bear (APT28) continues to weaponize Small Office/Home Office (SOHO) routers to facilitate illicit cyber operations. By exploiting known vulnerabilities in router firmware, the group hijacks traffic to redirect users to fraudulent websites, effectively masking the origin of their operations and amplifying large-scale disinformation campaigns across Europe."