Network & InfrastructureBleeping Computer
6.0 — HIGH
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Hackers have been hijacking hotel Wi-Fi DNS settings to redirect users to fake Microsoft 365 login pages, potentially stealing sensitive business information and communications.
⚙️Technical Details
💥Impact Assessment
Severity: High
Who Is at Risk
Traveling employees of organizations in various sectors
🛡️Recommended Actions
1Use an always-on, full-tunnel VPN and encrypted DNS in strict mode
2Disable WPAD and review logs for suspicious activity
3Disable Device Code authentication flow in Microsoft Entra ID when not needed
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.