…Hackers hijack routers to intercept encrypted communications
…Critical infrastructure, govt agencies among top targets
Daud Olatunji
The Federal Bureau of Investigation has warned of a sweeping cyber espionage campaign by Russian intelligence operatives targeting Nigeria and other countries through compromised internet routers.
The agency disclosed in a public service advisory dated April 7, 2026, that hackers linked to Russia’s General Staff Main Intelligence Directorate (GRU) are exploiting vulnerabilities in small office and home office routers to intercept and manipulate internet traffic.
The alert, issued in collaboration with the U.S. Department of Justice and other global security partners, revealed that the operation has been ongoing since at least 2024, affecting a broad range of victims worldwide, particularly in government, military, and critical infrastructure sectors.
According to the FBI, the cyber actors—identified as APT28, also known as Fancy Bear—have been targeting widely used routers, including devices manufactured by TP-Link, to gain unauthorised access to sensitive systems.
The agency explained that the attackers alter key router settings such as the domain name system and dynamic host configuration protocol, effectively redirecting users’ internet traffic through malicious servers under their control.
“This enables the actors to monitor and capture sensitive data, including login credentials, emails, and browsing activities, even when such data is protected by encryption protocols,” the FBI stated.
It added that the hackers deploy adversary-in-the-middle attacks, allowing them to intercept encrypted communications, particularly when users ignore certificate warning prompts on web browsers or email platforms.
Findings from the investigation showed that the attackers have harvested passwords, authentication tokens, and other classified information from a wide pool of victims before narrowing their focus to high-value intelligence linked to government and defence institutions.
The warning was jointly issued with international intelligence allies, including the National Security Agency and cybersecurity agencies across Europe and North America, as part of coordinated efforts to counter the growing threat.
To mitigate exposure, the FBI advised individuals and organisations to replace outdated routers, update device firmware regularly, and change default login credentials. Users were also urged to disable remote access features and pay close attention to security warnings while browsing.
For organisations operating remote work systems, the agency recommended stricter access controls, deployment of virtual private networks, and enhanced security configurations.
“Organisations may also consider encouraging employees to upgrade personal devices used for remote access to reduce vulnerabilities,” the agency added.
The FBI, however, urged individuals and organisations that suspect compromise to promptly report incidents through appropriate security channels for investigation and response.
'
'Do you want to share a story with us? Do you want to advertise with us? Do you need publicity for a product, service, or event? Contact us on WhatsApp +2348183319097 Email: platformtimes@gmail.com
We are committed to impactful investigative journalism for human interest and social justice. Your donation will help us tell more stories. Kindly donate any amount HERE
