Russian Hackers Use AI-Powered Malware in Hotel Wi-Fi Cyber Attack

Microsoft has issued a security warning about a cyber threat targeting hotel Wi-Fi networks. The operation, named 'CativeCrunch,' involves hackers using fake sign-in pages to steal login credentials and infect devices with malware.

The campaign, linked to the Russian espionage group Storm-2945, has been active since May and affects hospitality networks worldwide.

Hackers tamper with Wi-Fi equipment at hotels and conference centers, redirecting users to fake Microsoft 365 login pages. This poses a significant risk to business travelers, as the compromised network can appear normal, making the attack difficult to detect.

Microsoft's warning highlights the use of AI by Storm-2945 to support the campaign. The hackers manipulate network traffic to display fake verification checks and software updates, tricking users into downloading malware.