The Hacker Newsinfo@thehackernews.com (The Hacker News)
Hotel Wi-Fi Hijacked to Deliver Spyware via Fake Updates
Part of the Wi-Fi story · since 26 Jul
- Sun 26 Jul, 14:08 UTC. Security Affairs, first report. Hotel WiFi attacks hijack Microsoft 365 logins, linked to APT28.
- Mon 27 Jul, 11:21 UTC. SecurityWeek, its first report on the story. WiFi attacks steal Microsoft 365 logins via DNS spoofing.
- Thu 30 Jul, 08:21 UTC. SecurityOnline, its first report on the story. Hackers use hotel WiFi to redirect staff to fake Microsoft pages.
- Sat 1 Aug, 07:51 UTC. The Hacker News, its first report on the story. Hotel Wi-Fi Hijacked to Deliver Spyware via Fake Updates. This article, 4th of 10.
- Sat 1 Aug, 15:15 UTC. Security Affairs. Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens.
- Mon 3 Aug, 09:50 UTC. SecurityWeek. Russian hackers hijack public WiFi to steal Microsoft 365 logins.
- Mon 3 Aug, 14:51 UTC. Infosecurity, its first report on the story. APT29 hijacks hotel Wi‑Fi to spy on travelers via fake updates.
- Tue 4 Aug, 12:31 UTC. Malwarebytes, its first report on the story. Russian Hackers Hijack Hotel WiFi to Infect Travellers.
- Thu 6 Aug, 10:11 UTC. SecurityOnline. CaptiveCrunch Malware Campaign Hijacks Hotel Wi-Fi Worldwide.
- Wed 12 Aug, 00:46 UTC. Ars Technica, its first report on the story. Passengers spoof Delta flight WiFi to steal data, FBI probes.
The article titled "Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware" discusses a cyber espionage threat where compromised hotel Wi-Fi networks are used to distribute malicious software disguised as software updates. Users connecting to these networks may unknowingly download malware that allows attackers to surveil their activities and steal personal information.
The piece highlights the growing risks associated with public Wi-Fi usage, particularly in environments like hotels where travelers might be less cautious about security. It emphasizes the need for improved vigilance and protective measures among users accessing sensitive information over public internet connections.
How the story developed
10 articles from 7 outlets since 26 Jul. Quiet since 12 Aug. This was the 4th report, 6 days after the first.
- Sun 26 Jul, 14:08 UTC. Security Affairs, first report. Hotel WiFi attacks hijack Microsoft 365 logins, linked to APT28.
- Mon 27 Jul, 11:21 UTC. SecurityWeek, its first report on the story. WiFi attacks steal Microsoft 365 logins via DNS spoofing.
- Thu 30 Jul, 08:21 UTC. SecurityOnline, its first report on the story. Hackers use hotel WiFi to redirect staff to fake Microsoft pages.
- Sat 1 Aug, 07:51 UTC. The Hacker News, its first report on the story. Hotel Wi-Fi Hijacked to Deliver Spyware via Fake Updates. This article, 4th of 10.
- Sat 1 Aug, 15:15 UTC. Security Affairs. Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens.
- Mon 3 Aug, 09:50 UTC. SecurityWeek. Russian hackers hijack public WiFi to steal Microsoft 365 logins.
- Mon 3 Aug, 14:51 UTC. Infosecurity, its first report on the story. APT29 hijacks hotel Wi‑Fi to spy on travelers via fake updates.
- Tue 4 Aug, 12:31 UTC. Malwarebytes, its first report on the story. Russian Hackers Hijack Hotel WiFi to Infect Travellers.
- Thu 6 Aug, 10:11 UTC. SecurityOnline. CaptiveCrunch Malware Campaign Hijacks Hotel Wi-Fi Worldwide.
- Wed 12 Aug, 00:46 UTC. Ars Technica, its first report on the story. Passengers spoof Delta flight WiFi to steal data, FBI probes.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 10 articles as a listHide the list
- Sun 26 JulDay 01
- Hotel WiFi attacks hijack Microsoft 365 logins, linked to APT2814:08 · Security Affairs · First report
- Mon 27 JulDay 11
- WiFi attacks steal Microsoft 365 logins via DNS spoofing11:21 · SecurityWeek
Quiet for 3 days
Thu 30 JulDay 41- Hackers use hotel WiFi to redirect staff to fake Microsoft pages08:21 · SecurityOnline · Picked up again
Quiet for 2 days
Sat 1 AugDay 62- Hotel Wi-Fi Hijacked to Deliver Spyware via Fake Updates07:51 · The Hacker News · This article, 4th of 10
- Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens15:15 · Security Affairs
Quiet for 2 days
Mon 3 AugDay 82- Russian hackers hijack public WiFi to steal Microsoft 365 logins09:50 · SecurityWeek
- APT29 hijacks hotel Wi‑Fi to spy on travelers via fake updates14:51 · Infosecurity
- Tue 4 AugDay 91
- Russian Hackers Hijack Hotel WiFi to Infect Travellers12:31 · Malwarebytes
Quiet for 2 days
Thu 6 AugDay 111- CaptiveCrunch Malware Campaign Hijacks Hotel Wi-Fi Worldwide10:11 · SecurityOnline
Quiet for 6 days
Wed 12 AugDay 171- Passengers spoof Delta flight WiFi to steal data, FBI probes00:46 · Ars Technica · Picked up again