{
  "name": "APT28 exploit routers to enable DNS hijacking operations",
  "slug": "apt28-exploit-routers-to-enable-dns-hijacking-operations",
  "description": "Russian cyber actors APT28 have been exploiting routers to overwrite Dynamic Host Configuration Protocol (DHCP)/Domain Name System (DNS) settings to redirect traffic through attacker-controlled DNS servers. Resulting malicious DNS resolutions enable adversary-in-the-middle (AitM) attacks that harvest passwords, OAuth tokens and other credentials for web and email related services. This puts organisations at risk of credential theft, data manipulation and broader compromise.",
  "published": "2026-04-07T13:57:21.667000+00:00",
  "created_at": "2026-04-08T11:02:33.415000+00:00",
  "modified_at": "2026-04-08T09:02:33+00:00",
  "created_at_opencti": "2026-04-08T11:02:33.415000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "apt28",
    "dns hijacking",
    "exploit",
    "oauth",
    "russia",
    "tp-link"
  ],
  "tags": [
    "2026-04-07",
    "apt28",
    "dns hijacking",
    "exploit",
    "oauth",
    "russia",
    "tp-link"
  ],
  "related_entities": {
    "vulnerabilities": [
      {
        "id": "a742eea0-9153-435a-92fd-f269f5e04ade",
        "name": "CVE-2023-50224"
      }
    ],
    "indicators": [
      {
        "id": "dec61e9a-be0e-4040-9e29-41981773f618",
        "name": "103.140.186.148"
      },
      {
        "id": "209fdfd4-db9d-4eb8-9917-582b15dd9737",
        "name": "185.237.166.227"
      },
      {
        "id": "452faf8b-eeeb-4adf-ba87-ffa1e489ffcf",
        "name": "185.237.166.56"
      },
      {
        "id": "5b007aa4-1eab-4366-aedb-e210e05d5fb2",
        "name": "185.237.166.75"
      },
      {
        "id": "fa9953f8-8d8b-4933-a274-238dd7778945",
        "name": "185.237.166.241"
      },
      {
        "id": "4dc781dc-0e40-43cc-a5b2-efff14332c10",
        "name": "185.234.73.62"
      },
      {
        "id": "9d2fe4e4-608c-43ba-a992-976f71822945",
        "name": "185.237.166.66"
      },
      {
        "id": "686b33bf-d3ed-4834-9c38-98e61347474a",
        "name": "185.237.166.59"
      },
      {
        "id": "b0949260-29ff-44d5-952d-15a744051278",
        "name": "64.44.154.240"
      },
      {
        "id": "5bb413ee-cf90-4b96-b9ed-423c5f6256b9",
        "name": "64.44.154.238"
      },
      {
        "id": "fe1cdecf-1bc0-485b-90c7-938bb4ca8b24",
        "name": "185.234.73.58"
      },
      {
        "id": "24c6ac9b-035a-4fe7-b832-bb3467df8667",
        "name": "185.237.166.239"
      },
      {
        "id": "bcd422ba-b749-4a97-9482-c3ef53f1e1d9",
        "name": "185.234.73.61"
      },
      {
        "id": "e0d19df8-08a3-48d4-aa3b-6f4475ac62f8",
        "name": "185.237.166.57"
      },
      {
        "id": "2dd4055c-444c-48d4-99df-1abf8fe3c3c3",
        "name": "185.237.166.247"
      },
      {
        "id": "00db550f-7c87-4992-a1df-a34405159db3",
        "name": "185.237.166.229"
      },
      {
        "id": "d5e77182-4c06-4e35-b898-7b09ed99a032",
        "name": "185.237.166.244"
      },
      {
        "id": "9a1f01e4-1722-40e8-a640-e0dfe356aaf5",
        "name": "185.237.166.224"
      },
      {
        "id": "f769a9a7-171d-4d97-bbc1-f0a4a434bf7d",
        "name": "185.237.166.242"
      },
      {
        "id": "af9c8b04-5844-48c1-90b3-731b8dbb1ea1",
        "name": "185.237.166.67"
      },
      {
        "id": "7bf219d8-1aa5-4118-a67e-f98fde3176c2",
        "name": "185.237.166.73"
      },
      {
        "id": "c3830d35-b999-4238-a081-7e26b471322d",
        "name": "64.44.154.237"
      },
      {
        "id": "11c3f719-8d36-4ac5-a63c-72986660a408",
        "name": "185.237.166.71"
      },
      {
        "id": "a21c2962-859c-4663-8de3-200c5005bb66",
        "name": "185.237.166.236"
      },
      {
        "id": "6b58db76-72ae-465f-bc48-b25589974319",
        "name": "64.44.154.227"
      },
      {
        "id": "64385135-eb3e-4be6-a19d-628bc17af97a",
        "name": "185.237.166.72"
      },
      {
        "id": "e02bef3c-762a-4c3b-b208-b6b8a8b5027e",
        "name": "103.140.186.149"
      },
      {
        "id": "f4dbd93a-77e0-4ae4-a1d2-5decfa049f86",
        "name": "185.237.166.65"
      },
      {
        "id": "39a799b8-6703-49b2-b5a3-9f48dc946347",
        "name": "185.237.166.234"
      },
      {
        "id": "a9bd0418-4e8c-463c-aa8d-6ba4f1a0f54f",
        "name": "185.237.166.63"
      },
      {
        "id": "d2c44d13-2219-4cb4-8649-8b4d9e8ea1b7",
        "name": "185.237.166.245"
      },
      {
        "id": "937c0630-36bc-4165-a776-5a6af823ad05",
        "name": "185.237.166.248"
      },
      {
        "id": "abf67653-cf27-47e2-80b2-c56f7b1be382",
        "name": "185.237.166.74"
      },
      {
        "id": "555b666f-27e9-4087-b47a-87cd20297bde",
        "name": "185.237.166.64"
      },
      {
        "id": "c36c7eee-42db-4143-82bf-3c0bd2f71b4e",
        "name": "103.140.186.155"
      },
      {
        "id": "b2f7d784-1ee9-4e1e-8802-d7ec6d68cd5e",
        "name": "185.237.166.62"
      },
      {
        "id": "81fe233c-8ade-4243-b514-b102923cac65",
        "name": "185.237.166.61"
      },
      {
        "id": "0901fedb-2253-409d-88b4-941e2a47bd1a",
        "name": "185.237.166.69"
      },
      {
        "id": "686e38dc-810a-4255-acab-cda5853d2565",
        "name": "64.44.154.239"
      },
      {
        "id": "a9cd44c9-f0aa-43b7-9cc9-281dc4b72e3f",
        "name": "185.237.166.233"
      },
      {
        "id": "409aa099-034b-4c8e-a0e4-63997dd56459",
        "name": "185.237.166.70"
      },
      {
        "id": "6ed19a80-72a8-4a64-b2ff-5cbde85d7067",
        "name": "185.237.166.55"
      },
      {
        "id": "86d09dc6-883f-4afb-9b04-9fb33709737a",
        "name": "185.237.166.237"
      },
      {
        "id": "663e469c-b2b8-4c6c-bf94-210136add57f",
        "name": "185.237.166.238"
      },
      {
        "id": "fbdd2a1d-ddb9-4265-b8bf-6c93677e104f",
        "name": "185.237.166.246"
      },
      {
        "id": "82032ff7-447f-49a0-9f30-cf74b77f8d4b",
        "name": "185.237.166.232"
      },
      {
        "id": "e95e6c52-7773-4b37-a00d-6d3e26dc2408",
        "name": "185.237.166.58"
      },
      {
        "id": "73b3116d-2878-4224-b4f9-c37d952bbb58",
        "name": "185.237.166.231"
      },
      {
        "id": "df4779a9-88bf-49ee-92e4-fde6df23c6e0",
        "name": "185.237.166.235"
      },
      {
        "id": "f2a9f7f5-a84e-41e0-9cf6-b12b1bd3b020",
        "name": "185.237.166.68"
      },
      {
        "id": "cfdfd101-1221-4c0f-a079-26513542ffdf",
        "name": "185.237.166.225"
      },
      {
        "id": "6c5505c3-d10a-4080-baf7-c2a5f81e402b",
        "name": "185.237.166.243"
      },
      {
        "id": "3e5f3ac3-632e-4568-b787-dcd6f61a1cc7",
        "name": "185.237.166.228"
      },
      {
        "id": "54cb47bf-0f58-4f8f-9a59-5980dc8db88b",
        "name": "185.237.166.249"
      },
      {
        "id": "7e0d0aca-8ca7-4390-b5fc-da431daecd29",
        "name": "185.237.166.226"
      },
      {
        "id": "605f63e3-5638-463e-a5f9-27cd2ca1829e",
        "name": "185.237.166.230"
      },
      {
        "id": "9d880c03-6ca0-4c4e-b358-02d4765f6277",
        "name": "185.237.166.60"
      },
      {
        "id": "16037bec-8e7c-4378-b77d-41733a79a55f",
        "name": "185.237.166.240"
      }
    ],
    "intrusion_sets": [
      {
        "id": "2e5c75e1-c481-46c4-8d26-f0774a3457fa",
        "name": "APT28",
        "slug": "apt28"
      }
    ],
    "attack_patterns": [
      {
        "id": "00430919-9257-403b-8a1b-958d4c3613aa",
        "name": "T1557"
      },
      {
        "id": "6babd5aa-5112-4f14-a660-60d756a65d6d",
        "name": "T1586"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "1e043fe4-2413-4b8e-887c-0fe45d095a24",
        "name": "T1583"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "7616ff60-a18f-4663-9824-b889aa01c8ce",
        "name": "T1588"
      }
    ],
    "observables": [
      {
        "id": "38556d30-7ead-4577-9094-2ba2d1efa533",
        "name": "185.237.166.58"
      },
      {
        "id": "6ad6e741-a68d-4943-b2de-d1b5e08af4a7",
        "name": "185.237.166.56"
      },
      {
        "id": "3e806326-a619-4e88-9892-9d2cdb4dd2af",
        "name": "185.237.166.248"
      },
      {
        "id": "cb5b870c-7b74-45cd-8f47-65891a341b35",
        "name": "185.234.73.58"
      },
      {
        "id": "cae6852d-3ff8-47af-b0ab-ddd52db33fba",
        "name": "185.237.166.234"
      },
      {
        "id": "77494ff8-fa75-43f0-8658-5e8de091a766",
        "name": "185.237.166.247"
      },
      {
        "id": "dd0e2df4-e403-439b-b17c-a3e26c7d8de8",
        "name": "185.237.166.232"
      },
      {
        "id": "77b35dc2-0bfe-4346-9456-f5727aa0d5ca",
        "name": "185.237.166.68"
      },
      {
        "id": "3a3a360c-197b-43dd-9ea7-59e587fe0c1f",
        "name": "185.237.166.229"
      },
      {
        "id": "1e199db1-abf2-4ad0-b5b3-95c8eb33b614",
        "name": "64.44.154.227"
      },
      {
        "id": "c8cb44b9-0d19-456c-a326-cb9b65aab085",
        "name": "185.237.166.237"
      },
      {
        "id": "1e13843b-8dec-4a1e-aab9-85fa407700f8",
        "name": "103.140.186.148"
      },
      {
        "id": "70b6a6ff-a0d7-4ca2-9fc2-bb94c2d20cda",
        "name": "185.237.166.233"
      },
      {
        "id": "ebae7176-6f9b-48cf-aa48-2d7a32843725",
        "name": "185.237.166.69"
      },
      {
        "id": "66cecff4-c4e3-4ebc-8751-c06024277253",
        "name": "185.237.166.73"
      },
      {
        "id": "78ac9b15-a3f9-4993-bfd6-fca1af257202",
        "name": "185.237.166.235"
      },
      {
        "id": "62be9c8a-0374-4f8e-8e2e-fa9d4fb850a4",
        "name": "185.237.166.60"
      },
      {
        "id": "a815c669-d3e5-4bc6-9847-9cce572564df",
        "name": "185.234.73.62"
      },
      {
        "id": "84be20a8-2e79-4925-9be5-82d0fd2bad5c",
        "name": "185.237.166.230"
      },
      {
        "id": "a3a67271-a324-47a9-a74d-8a83e4f35532",
        "name": "185.234.73.61"
      },
      {
        "id": "c87404e1-ed4d-4622-9655-b7b116e98778",
        "name": "185.237.166.72"
      },
      {
        "id": "ca8cd91f-5df6-4f28-aea9-0e6ed0f2700b",
        "name": "103.140.186.155"
      },
      {
        "id": "5e416efc-55d5-425d-91fe-b279b40fb09d",
        "name": "185.237.166.231"
      },
      {
        "id": "7e4f4b6d-df09-491a-983a-247a6f241bc9",
        "name": "185.237.166.61"
      },
      {
        "id": "8ab60bbf-22b1-426f-9479-7bb90e3bfbc5",
        "name": "185.237.166.243"
      },
      {
        "id": "7574c2f3-bc76-4f76-86ed-30db01f553b8",
        "name": "185.237.166.227"
      },
      {
        "id": "519f29df-658b-4a9e-8d40-64df0e6404d1",
        "name": "185.237.166.242"
      },
      {
        "id": "78e4cfa5-7771-4d24-87a9-b8a4b57642ae",
        "name": "64.44.154.239"
      },
      {
        "id": "7fdf054d-19be-43cd-bb5e-6bb52fc7617a",
        "name": "185.237.166.240"
      },
      {
        "id": "6e89f17f-9807-414a-9a58-d12d51cf89b8",
        "name": "185.237.166.55"
      },
      {
        "id": "0f8c2d01-6497-4200-aef9-9a91fd4710f0",
        "name": "185.237.166.241"
      },
      {
        "id": "2fd05751-c736-4983-a871-109376a4f0ad",
        "name": "185.237.166.71"
      },
      {
        "id": "4417f867-e57e-4885-99a4-6df7f17a0b12",
        "name": "64.44.154.238"
      },
      {
        "id": "74747fe7-a541-4397-8d24-152650f8ce35",
        "name": "64.44.154.237"
      },
      {
        "id": "a8bde950-b128-4e54-a049-938f9e1514a8",
        "name": "185.237.166.244"
      },
      {
        "id": "bb5f6cc1-5bf1-4316-b392-6034dd15ea11",
        "name": "185.237.166.226"
      },
      {
        "id": "9c23d0e7-86b8-4593-a8ad-04acdfdf6ece",
        "name": "185.237.166.74"
      },
      {
        "id": "e77b352c-8170-4892-8cc5-2372bbbb9eb9",
        "name": "185.237.166.224"
      },
      {
        "id": "18d1edb9-f13b-4ab1-942d-d5859c80db4e",
        "name": "185.237.166.66"
      },
      {
        "id": "ff48658c-dfd6-4491-b2ce-d58e8423e88b",
        "name": "185.237.166.239"
      },
      {
        "id": "8fdef89a-c9f9-459f-b3a8-c9b0615d67df",
        "name": "185.237.166.245"
      },
      {
        "id": "54d0b048-6e9a-4365-b3f3-60fa926394d4",
        "name": "185.237.166.236"
      },
      {
        "id": "38ce9e46-2b49-4c5d-8a27-a8720d32bffe",
        "name": "185.237.166.57"
      },
      {
        "id": "f0ff6643-e525-41b0-924d-e44ffaffe749",
        "name": "185.237.166.67"
      },
      {
        "id": "e238ff10-b521-49ff-9c0e-5174836d97e2",
        "name": "185.237.166.75"
      },
      {
        "id": "4c155836-0235-4f5d-9603-b9967b39ca12",
        "name": "185.237.166.64"
      },
      {
        "id": "7c315362-761a-476a-a38e-695fc063e43c",
        "name": "185.237.166.59"
      },
      {
        "id": "8455063d-bc1e-4cfd-86b1-42f4a6edfbef",
        "name": "185.237.166.70"
      },
      {
        "id": "60332db6-ad81-4467-a3c9-d0fc7541e3e6",
        "name": "185.237.166.228"
      },
      {
        "id": "497e5c5a-8df6-471c-8501-79820c2ea5e4",
        "name": "185.237.166.246"
      },
      {
        "id": "8041f966-82ca-44f2-9306-1acce5db085e",
        "name": "185.237.166.62"
      },
      {
        "id": "74f8c8eb-43b2-412a-8d76-95925c95e702",
        "name": "185.237.166.238"
      },
      {
        "id": "8a6a0198-c56a-48db-b686-ce7fd71db607",
        "name": "103.140.186.149"
      },
      {
        "id": "d02f8e4e-b0a3-4580-97c2-f7a8bafd1358",
        "name": "185.237.166.63"
      },
      {
        "id": "dee65cd1-892d-4a81-8e4d-c12062a71eb8",
        "name": "185.237.166.249"
      },
      {
        "id": "33017cef-0c56-4006-906c-f27ea95c89d7",
        "name": "64.44.154.240"
      },
      {
        "id": "438cd933-7be0-453f-b1e8-9e95f435667b",
        "name": "185.237.166.65"
      },
      {
        "id": "5f77324c-6d42-4713-9eea-b31e941c8494",
        "name": "185.237.166.225"
      }
    ]
  },
  "external_refs": [
    {
      "id": "38cade9b-1dcb-43e7-ad55-c700c03c03d8",
      "standard_id": "external-reference--124be200-44a9-59ba-9002-c92f5e14a894",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://www.ncsc.gov.uk/news/apt28-exploit-routers-to-enable-dns-hijacking-operations",
      "hash": null,
      "external_id": null,
      "created": "2026-04-08T11:02:26.087Z",
      "modified": "2026-04-08T11:02:26.087Z",
      "createdById": null
    },
    {
      "id": "acf24a03-abfe-449f-a154-e571991d539a",
      "standard_id": "external-reference--1e6f0325-b9f0-5db9-b2f2-62f795ac5968",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/69d50d4138f1353a9d14ce48",
      "hash": null,
      "external_id": "69d50d4138f1353a9d14ce48",
      "created": "2026-04-08T11:02:26.046Z",
      "modified": "2026-04-08T11:02:26.046Z",
      "createdById": null
    }
  ]
}