Elite Russian hackers have been infiltrating commonly used routers in the UK to access personal data of users, as warned by the UK’s National Cyber Security Centre (NCSC). The state-linked Russian hacker group APT28 has been rerouting internet traffic through their controlled malicious servers covertly, according to the NCSC.
A recent advisory issued by the NCSC highlighted that APT28 has been exploiting vulnerable internet routers for Domain Name System (DNS) hijacking operations. This allows the hackers to intercept traffic, gather login credentials such as passwords and access tokens from personal web and email services.
The manipulation of the DNS process, which enables users to access websites by typing familiar addresses, is used to redirect users to malicious websites designed to steal sensitive information. The NCSC described the hackers’ activity as “likely opportunistic”, targeting a broad audience initially before focusing on specific intelligence-related targets as the attack progresses.
Paul Chichester, the NCSC’s operations director, emphasized the importance of understanding the techniques outlined in the advisory and implementing the recommended mitigation strategies. The NCSC provided guidelines to enhance user protection against DNS hijacking attacks, including applying security updates and enabling two-step verification.
APT28, also known as Fancy Bear, Forest Blizzard, the Sednit Gang, and Sofacy, has a history of engaging in significant cyber-attacks. The group has been implicated in high-profile breaches, including those targeting the US Democratic National Committee, the German Bundestag, and various technology organizations in the West.
The NCSC identified APT28 as Unit 26165 of the GRU, Russia’s foreign intelligence agency. In a 2025 advisory, the NCSC, along with partners from ten countries, disclosed details of APT28’s malicious cyber campaign against public and private organizations since 2022. The group has targeted entities involved in logistics, defense, IT services, maritime, airports, ports, and air traffic management systems sectors across multiple NATO member states.
This content may contain cookies and other identifiers to enhance site experience, analyze usage, and display personalized advertising. Users can manage data sharing preferences by adjusting settings and reviewing the provided Privacy Notice and Terms and Conditions.
