Russia-linked Hackers Infiltrate Hotel WiFi Networks, Microsoft Warns

Microsoft has issued a warning to Windows PC users about a global hacking campaign attributed to Russia's Storm-2945, a sub-cluster of Midnight Blizzard. The company discovered CaptiveCrunch, which targets corporate travelers with credential theft and malware delivered through compromised guest networks.

The hackers infiltrate devices on hotel WiFi networks by displaying fake verification checks, sign-in prompts, and software updates. They use AI to support their campaign, according to Microsoft Threat Intelligence.

The company warns that users should assume public and hospitality network infrastructure may not be trustworthy and adopt controls to limit exposure to traffic manipulation, credential theft, and device code phishing.