Threat IntelligenceHotel Wi-Fi hijack campaign quietly harvests Microsoft 365 logins from business travellers
A cluster with overlaps to Russia-linked APT28 activity is tampering with DNS on hotel and conference Wi-Fi gateways to funnel guests into fake Microsoft login pages, ReliaQuest reports.