Product
TP-Link WR841N
- First Reported
- Apr 7, 2026
- Latest Reported
- Apr 7, 2026
Reported Context (1)
- One of the router models that APT28 exploited for their DNS poisoning operations was the TP-Link WR841N, likely using CVE-2023-50224 [T1584.008, T1588.006]. This vulnerability enables an unauthenticated attacker to APT28 Exploits SOHO Routers to Hijack DNS and Steal Credentials
CVE (1)
Threat Actors (6)
MITRE ATT&CK (4)
Vendors (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.