The Security Service of Ukraine, together with the FBI and EU law enforcement agencies, uncovered a large-scale Russian military intelligence operation spying via hacked Wi-Fi routers. More than 100 servers were blocked during the operation.
According to the SBU, a joint international cyber operation with the FBI, Polish counterintelligence and EU law enforcement agencies was conducted to neutralize Russian intelligence activities.
The investigation found that Russian military intelligence hacked office and home Wi-Fi routers in Ukraine, EU countries and the United States by exploiting outdated security systems.
After gaining access, the attackers redirected internet traffic through a controlled network of DNS servers, allowing them to intercept passwords, authentication tokens and other sensitive data, including emails.
The collected information was intended for use in cyberattacks, information operations and intelligence gathering.
State institutions, Ukraine’s Defense Forces units and defense industry enterprises were among the primary targets.
As a result of the operation, more than 100 servers were blocked and hundreds of routers in Ukraine were removed from Russian control.
Measures are ongoing to bring all those involved in cybercrimes to justice.
The SBU urged router owners to update device software, install the latest security updates and change access passwords. It also recommends disabling remote access to router control panels and checking settings for suspicious changes.
Telecommunications providers are encouraged to assist their clients in implementing cybersecurity measures.