Home / Aug 02, 2026 / Story
0
#2 The Hacker News general August 01, 2026 at 06:29 UTC

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

By [email protected] (The Hacker News)

AI Summary

Microsoft researchers attribute a hotel Wi-Fi hijacking campaign tracked as CaptiveCrunch to Storm-2945, assessed as an operational sub-cluster of Midnight Blizzard (APT29/Cozy Bear). The operation delivers CornFlake, a RAT capable of capturing webcam images, microphone audio, and keystrokes, via fake browser update prompts served over compromised hotel networks. This nation-state surveillance operation targeting travelers underscores the persistent threat of captive portal abuse in hospitality environments.

Relevance score: 91.0/100

# More from August 02