State-backed Russian hacker groups such as Berserk Bear and Energetic Bear infiltrate routers through outdated firmware and default configurations to gain long-term network access — not solely through zero-day exploits.