Product
TP-Link
- First Reported
- Jun 11, 2026
- Latest Reported
- Jun 16, 2026
Reported Context (2)
- DOJ said the network relied on compromised SOHO routers, including thousands of TP-Link devices. The actors stole credentials, filtered DNS requests, and used false DNS records to stage adversary-in-the-middle attacks Report Details Russian Router Hijacking and Messaging-Account Operations
- FrostArmada campaign on MikroTik and TP-Link routers. APT28’s Tradecraft Evolves from X-Agent to LLM-Driven Malware
CVE (2)
Malware (16)
People (1)
Threat Actors (37)
MITRE ATT&CK (30)
Vendors (1)
Products (21)
Tools (4)
Industries (11)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.