Hotel WiFi Hacked: Microsoft Warns of Widespread Compromise

Microsoft has issued a warning to travelers about compromised hotel WiFi networks. According to the company's Threat Intelligence website, a hacking operation called 'CaptiveCrunch' has been targeting hospitality-related organizations since May. The attack works by displaying pop-up windows that trick users into downloading malicious files when they connect to a hotel network.

The hackers can then gain access to sensitive information such as screenshots and keystrokes, and even remotely hijack devices if needed. Additionally, fake login screens may appear, giving the attackers access to users' personal email addresses. Microsoft advises against using hotel WiFi for private activities and instead recommends using mobile hotspots or being cautious when encountering unexpected pop-up windows.

The company did not provide further information about the origins of the 'CaptiveCrunch' operation or its ties to Russia, which were mentioned in a previous report. However, it emphasizes that users should be aware of potential security risks when using public WiFi networks.