Microsoft warns hotel Wi-Fi can leak passwords, video

The Story in Brief

Microsoft has warned that a Russian hacking group, Storm-2945, is using fake hotel Wi-Fi portals to steal passwords, record audio and video, and take over devices. The campaign, dubbed CaptiveCrunch, has been active since at least May and targets corporate travelers at hotels, conference centres, and airports globally. Attackers compromise the Wi-Fi infrastructure and redirect users to fake login screens or browser update prompts. Once credentials are entered or malware downloaded, the hackers gain access to Microsoft 365 accounts, emails, and corporate networks. Microsoft advises travellers to use cellular hotspots and ignore unexpected pop-ups on public networks.