Travelers beware — Microsoft experts warn hotel Wi-Fi can be hijacked to infect your devices with dangerous malware

Wi-Fi.

• Microsoft reports Russian APT29 (Midnight Blizzard) hijacking captive portals in hotels and conference centers
• Victims redirected to fake Microsoft 365 logins or bogus update pages, spreading CornFlake and CocoShell malware
• CornFlake steals files, credentials, and device data; CocoShell targets browser cookies, passwords, and Microsoft tokens

Threat actors are taking over Wi-Fi networks in hotels and conference centers and using the log-in portals to steal credentials and deploy information-stealing malware, experts have claimed.