#2
The Hacker News
general
August 01, 2026 at 06:29 UTC
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
By [email protected] (The Hacker News)
AI Summary
Microsoft researchers attribute a hotel Wi-Fi hijacking campaign tracked as CaptiveCrunch to Storm-2945, assessed as an operational sub-cluster of Midnight Blizzard (APT29/Cozy Bear). The operation delivers CornFlake, a RAT capable of capturing webcam images, microphone audio, and keystrokes, via fake browser update prompts served over compromised hotel networks. This nation-state surveillance operation targeting travelers underscores the persistent threat of captive portal abuse in hospitality environments.
Relevance score: 91.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →