Russian hackers are attacking Wi-Fi networks in hotels worldwide.…
Russian hackers are attacking Wi-Fi networks in hotels worldwide. Microsoft has reported the detection of a large-scale hacking campaign targeting the infrastructure of public Wi-Fi networks in hotels, conference centers, and other public venues around the world.
Consensus
- Microsoft reported a large-scale cyber campaign targeting public Wi-Fi networks in hotels, airports, and conference centers worldwide.
- The attackers used captive portal pages to redirect users to phishing sites and distribute malware.
- The campaign is attributed to the Storm-2945 group, which is linked to the Midnight Blizzard (APT29/Nobelium) hacker group.
- Midnight Blizzard is associated with Russia's Foreign Intelligence Service (SVR), according to Microsoft and Western governments.
- The malware distributed includes full-featured remote access trojans (RATs) for Windows, written in Golang.
- The attacks involve man-in-the-middle (AitM) techniques and exploit automatic connection checks performed by browsers.
- The goal of the campaign is to steal user credentials, session tokens, and gain access to corporate and personal data.
Points of divergence
- Storm-2945 has been active at least since February 2026, and began targeting guest Wi-Fi networks in early May 2026. — kommersant
- Microsoft claims the hackers used artificial intelligence in planning and executing attacks. — kommersant
- Microsoft previously reported on Midnight Blizzard's attacks against the company in early 2024, characterizing them as state-sponsored. — kommersant
- If attackers gained access to shared services used by multiple Wi-Fi operators, one successful attack could compromise many networks. — meduza
- The campaign was named CaptiveCrunch by Microsoft. — tg_radiosvoboda
- The campaign was named CaptiveCrunch by Microsoft. — tg_currenttime
- Midnight Blizzard is linked to the Russian Foreign Intelligence Service (SVR) according to US and UK authorities. — kommersant
Coverage (8 sources)
- Microsoft accused Russian hackers in attacks using guest Wi-Fi — Коммерсантъ
- Microsoft warns of Russian hackers' attack on Wi-Fi networks in hotels worldwide — ЭХО / Новости
- Microsoft accused Russian hackers of compromising hotel Wi-Fi networks worldwide — The Moscow Times
- Russian hackers attack Wi-Fi networks in hotels around the world — Дождь
- Russian hackers attack Wi-Fi networks in hotels worldwide — Дождь (Telegram)
- Microsoft warned about a large-scale campaign of Russian hackers against public Wi-Fi networks in hotels worldwide — Meduza
- Microsoft reported on a large-scale campaign by Russian hackers to hack Wi-Fi networks in hotels worldwide — Радио Свобода
- Microsoft reported on a large-scale campaign by Russian hackers to hack Wi-Fi networks in hotels worldwide — Настоящее Время