FrostArmada: All thriller, no (malware) filler

Forest Blizzard’s “FrostArmada” campaign stealthily hijacked authentication traffic from thousands of victims worldwide by exploiting vulnerable routers’ DNS settings, funneling credentials to attacker-controlled infrastructure and demonstrating the group’s rapid adaptation and persistent threat to government and enterprise networks.