ThreatVectr
Tag

#DNS hijacking

4 stories taggedDNS hijacking.

A hotel lobby with Wi-Fi router and network infrastructure visible, guests at tables with laptops and phones connecting to wireless networks, login screens glow
Identity & Access

Russian hackers turn hotel Wi-Fi into a trap for Microsoft 365 logins

Microsoft has attributed the CaptiveCrunch campaign to Storm-2945, a sub-group of APT29, which has been poisoning hotel and conference Wi-Fi networks since at least May 2025 to steal corporate accounts using two newly identified malware families.

4 min read
A computer screen displaying a security warning dialog with broken lock icons and red error messages, while in the blurred background a router and network cable
Breaches

CubePilot Drone Maker Hijacked at the DNS Level, Passwords and Firmware in Doubt

Attackers seized control of cubepilot.org on July 24, issued valid HTTPS certificates for every subdomain, and intercepted traffic to the login portal and forum before the Australian firm clawed the domain back.

4 min read
Hotel lobby with business travelers at the front desk and in seating areas, Wi-Fi network selection screen on a laptop showing spoofed networks, fake Microsoft
Threat Intelligence

Hotel Wi-Fi hijack campaign quietly harvests Microsoft 365 logins from business travellers

A cluster with overlapping infrastructure tied to Russia-linked APT28 activity is tampering with DNS on hotel and conference Wi-Fi gateways to funnel guests into fake Microsoft login pages, ReliaQuest reports.

4 min read
Illustration: cybersecurity experts analyzing a network map with highlighted compromised routers
Threat Intelligence

GRU Operators Drained Microsoft 365 Tokens by Rewriting DNS on 18,000 SOHO Routers

Forest Blizzard shifted from targeted router malware to mass DNS hijacking after a UK advisory in August, intercepting OAuth tokens on Outlook on the web.

3 min read
© 2026 Threat Vectr