Security
Germany's Federal Office for the Protection of the Constitution has warned of a cyber espionage campaign linked to Russian state-backed hackers targeting vulnerable internet routers to infiltrate sensitive networks.
The agency said the attacks were carried out by APT28, also known as “Fancy Bear,” which Western governments attribute to Russia’s military intelligence service, the GRU.
According to the warning, the group compromised insecure routers manufactured by TP-Link to gain access to military, government, and critical infrastructure systems. The campaign affected several thousand devices globally, including around 30 in Germany, with confirmed breaches in some cases.
The alert was issued in coordination with Germany’s foreign intelligence agency, Federal Intelligence Service, and the Federal Bureau of Investigation in the United States, highlighting the international scope of the threat.
Authorities said affected organizations have been advised to replace compromised routers to mitigate risks and prevent further intrusion.
APT28 has previously been linked to multiple high-profile cyberattacks in Germany, including incidents targeting the national parliament, the Social Democratic Party, and air traffic control systems.
The latest warning underscores ongoing concerns about state-sponsored cyber operations targeting critical infrastructure and the importance of securing network devices against evolving threats.
The agency said the attacks were carried out by APT28, also known as “Fancy Bear,” which Western governments attribute to Russia’s military intelligence service, the GRU.
According to the warning, the group compromised insecure routers manufactured by TP-Link to gain access to military, government, and critical infrastructure systems. The campaign affected several thousand devices globally, including around 30 in Germany, with confirmed breaches in some cases.
The alert was issued in coordination with Germany’s foreign intelligence agency, Federal Intelligence Service, and the Federal Bureau of Investigation in the United States, highlighting the international scope of the threat.
Authorities said affected organizations have been advised to replace compromised routers to mitigate risks and prevent further intrusion.
APT28 has previously been linked to multiple high-profile cyberattacks in Germany, including incidents targeting the national parliament, the Social Democratic Party, and air traffic control systems.
The latest warning underscores ongoing concerns about state-sponsored cyber operations targeting critical infrastructure and the importance of securing network devices against evolving threats.
See What’s Next in Tech With the Fast Forward Newsletter
Tweets From @varindiamag
Nothing to see here - yet
When they Tweet, their Tweets will show up here.




