Russian military intelligence-linked hackers are exploiting known vulnerabilities in older internet routers to harvest authentication tokens from Microsoft Office users across over 18,000 networks. The campaign operates without deploying malicious software, allowing state-backed actors to conduct stealthy credential theft at scale.