Microsoft Warns Hotel Wi-Fi Portals Are Under Active Attack
Microsoft has discovered a Russian malware campaign called CaptiveCrunch, which is designed to compromise users of public Wi-Fi with falsified prompts at the captive sign-in screen. This includes phishing pages that steal logins or even falsified Windows or Android system update/download prompts. Victims may also find their PC used in a machine-in-the-middle (MitM) attack that makes further credential theft possible by routing their traffic through an attacker's proxy network.
Public Wi-Fi has long been known to pose numerous security risks, which is why so many cybersecurity experts warn against using it without a VPN or other methods to protect the anonymity of your traffic and devices. What is new is the scope and infrastructure behind these CaptiveCrunch attacks, which are being run by Russian hacking group Storm-2945, which is a sub-cluster of the larger Midnight Blizzard group.
Midnight Blizzard is explicitly targeting travelers or other vulnerable users who connect...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE
