Microsoft Issues Hotel Wi-Fi Warning For Windows PC Users

Microsoft warned about a campaign abusing captive portals on hotel and other public Wi‑Fi networks.

The Russia-linked Storm-2945 group, part of Midnight Blizzard, is using fake login, verification, and update pages to steal tokens and deliver Windows malware.

Microsoft named the activity CaptiveCrunch and said Android devices may also be targeted.

A remote-access trojan called CornFlake was also identified, and travelers are urged to avoid trusting guest networks and use private connections instead.