
A group associated with Russian military intelligence known as APT28, or Fancy Bear, targeted “vulnerable” routers in Germany and elsewhere made by technology company TP-Link, they said.
The hackers aimed to “obtain military information, government information, or information about critical infrastructure,” said the BfV domestic intelligence service.
The group is suspected of carrying out numerous cyberattacks worldwide. In Germany it was previously accused of targeting the air traffic control and of spreading disinformation ahead of last year’s general elections.
Russia denies being behind such actions.
In the latest case, the hackers targeted several thousand publicly accessible routers made by TP-Link, a company founded in China which now has global operations, the BfV said.
About 30 vulnerable devices were identified in Germany, according to the agency, which said it was issuing a warning along with other intelligence agencies, including the FBI.
The BfV had alerted the operators of routers allegedly targeted in Germany, and many had been replaced.
Germany, a key supporter of Ukraine since Moscow’s full-scale invasion in 2022, is on high alert over alleged Russian espionage, drone surveillance and sabotage activities, as well as cyberattacks and disinformation campaigns.