Russian Hackers Hijack Hotel Wi-Fi Networks for Malware Infections

Microsoft has issued a security warning regarding a new cyber threat targeting hotel Wi-Fi networks. The operation, named 'CaptiveCrunch,' involves hackers using phony sign-in pages to steal login credentials and infect devices with malware.

The campaign, linked to the Russian espionage group Storm-2945, has been active since May and affects hospitality networks worldwide. Hackers tamper with Wi-Fi equipment at hotels and conference centers, redirecting users to fake Microsoft 365 login pages.

This poses a significant risk to business travelers, as the compromised network can appear normal, making the attack difficult to detect. The cybersecurity firm ReliaQuest reported compromised Wi-Fi gateways in several U.S. cities, targeting various industries, including financial services and healthcare.