Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

By Bill Toulas

AI Summary

Threat actors are hijacking DNS settings on Wi-Fi routers at hotels and conference centers to redirect guests to spoofed Microsoft 365 login pages designed to steal credentials. The attack targets transient, high-value business users who are unlikely to scrutinize connection details on unfamiliar networks. Security teams should advise employees to use VPNs on untrusted networks and enable phishing-resistant MFA such as FIDO2 for M365 accounts.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 78.0/100

# More from July 26

1
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available The Hacker News
2
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE The Hacker News
3
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git The Hacker News
4
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery The Hacker News
5
Default Azure Automation Setting Enables Cross-Tenant Identity Takeover Dark Reading
6
Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable The Hacker News
8
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks The Hacker News
9
Golden Chickens Resurfaces With Four New Malware Families and Modular Implants The Hacker News
10
Hermes AI agent used to automate attack on Thai Finance Ministry BleepingComputer