Russia's GRU, via APT28, is hijacking consumer routers globally to conduct espionage and harvest credentials. Researchers warn of persistent, evolving cyber threats.