Krebs on Security: Russia Hacked Routers to Steal Microsoft Office Tokens

Incident Summary

Russian hackers exploited flaws in older internet routers to steal Microsoft Office authentication tokens from users. The incident impacts Microsoft Office accounts because stolen tokens can enable unauthorized access without a password. Affected parties include Microsoft Office users globally, particularly those whose traffic passed through vulnerable routers. Limited public details available on the scope and remediation steps in the provided information.

Incident Details

Type

Data Breach

Severity

LOW

Status

ACTIVE

Date Occurred

April 7, 2026

External Sources

• https://krebsonsecurity.com/2026/04/russia-hacked-routers-to-steal-microsoft-office-tokens/