CYBERSECURITYTRACKER
TRACKING7,811 stories in this site build1,697 vulnerability news stories in this site build
Permanent story citation

Risky Bulletin: Russia is behind the recent hotel WiFi hacks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 3701

As cited

Copy frozen at (site build).

threat intel

Risky Bulletin: Russia is behind the recent hotel WiFi hacks

Microsoft attributes a widespread campaign targeting hotel WiFi gateways globally to a Russian state-sponsored hacking group. The attacks manipulate DNS traffic to redirect users to phishing sites and malware downloads, often using ClickFix pages as a delivery mechanism. The campaign is larger and more complex than initially reported by ReliaQuest two weeks ago.

Why it matters: Hotel guests, IT staff managing hospitality networks, and organizations with employees traveling face credential theft and malware infection risks from compromised WiFi; network administrators should audit DNS configurations and implement traffic monitoring on hotel networks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Risky Bulletin: Russia is behind the recent hotel WiFi hacks

Microsoft attributes a widespread campaign targeting hotel WiFi gateways globally to a Russian state-sponsored hacking group. The attacks manipulate DNS traffic to redirect users to phishing sites and malware downloads, often using ClickFix pages as a delivery mechanism. The campaign is larger and more complex than initially reported by ReliaQuest two weeks ago.

Why it matters: Hotel guests, IT staff managing hospitality networks, and organizations with employees traveling face credential theft and malware infection risks from compromised WiFi; network administrators should audit DNS configurations and implement traffic monitoring on hotel networks.

VendorsMicrosoft
Actorsmidnight blizzard
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary