Hackers linked to Russia's military intelligence units used known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users.