Heard of fileless malware? How about malwareless cyber espionage? Russia's APT28 is spying on global organizations by modifying just one DNS setting in vulnerable routers.
Russia's Forest Blizzard Nabs Rafts of Logins Via SOHO Routers
Summary + source link. No paywalls, no tracking.