Skip to main content

Tag: storm 2945

2 articles

Hotel business area with people in background, focusing on Wi-Fi access point and device with login screen.

Microsoft Links Russian Hackers to Hotel Wi-Fi Attacks Exploiting Microsoft 365 Accounts

Microsoft has uncovered a sneaky hacking campaign, dubbed CaptiveCrunch, where Russian threat actors have been exploiting hotel and conference Wi-Fi to steal Microsoft 365 accounts and install malware since early May. The culprits behind this are Midnight Blizzard, a notorious Russian hacking group, and a sub-cluster known as Storm-2945.

Analyst 207
Hotel lobby with guest checking in at reception desk near public Wi-Fi access point.

Midnight Blizzard Hijacks Hotel Wi-Fi to Spread Espionage Malware

Malicious hackers from Midnight Blizzard have hijacked hotel Wi-Fi networks to spread espionage malware, using a sneaky tactic called CaptiveCrunch that's been flying under the radar since early May. By taking over captive portals, attackers tricked victims into downloading fake updates that actually served up malicious software.

Analyst 207