Cybersecurity Malware MFA Phishing Privacy

Midnight Blizzard targets business travelers using hotel Wi-Fi as an attack weapon

Microsoft warns of CaptiveCrunch, a global campaign in which Storm-2945 manipulates hotel, conference, and other guest networks to attack business travelers. Through hijacked captive portals, victims are redirected to phishing pages or misled with fake browser and Windows updates that install malware. The CornFlake RAT and ChocoShell used can steal passwords, cookies, Microsoft 365 tokens, […]