MikroTik Under Siege: Critical SSH Auth Bypass Exploited – Patch Now, Assume Compromise
Urgent warning: MikroTik devices face active exploitation via an SSH authentication bypass. Patch immediately and assume compromise.
Critical Alert: MikroTik Routers Under Siege Via Unauthenticated Internet-Exposed SSH
Attackers exploit MikroTik routers with internet-exposed SSH, gaining full administrative control without authentication.
APT28's
APT28 (Forest Blizzard) is exploiting MikroTik/TP-Link SOHO routers in a global DNS hijacking and cyber espionage campaign since May 2024.