Microsoft warns hackers have compromised many hotel WiFi networks | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

Microsoft says the WiFi at your hotel might be compromised.

In a post on its Threat Intelligence website (via ABC News), Microsoft warned of a new hacking operation called “CaptiveCrunch,” which the company claimed had some ties to Russia.

Starting in May, Microsoft said it had observed a “widespread compromise of Wi-Fi networks at hospitality-related organizations,” including WiFi networks at hotels.

The hacking operation works by tricking users to download malicious files via pop-ups that appear when connecting to a hotel WiFi network. Those who are doing this are able to get screenshots and keystrokes, and can even remotely hijack devices if necessary. There are also fake login screens that could give the hackers access to a user’s personal email address.

According to Microsoft, the best way to avoid this is to use something more private when traveling, like a mobile hotspot. If that’s not an option and you must use hotel WiFi, be on the lookout for any kind of pop-up window that appears after logging into the network. These can appear as Windows Update pop-ups or other kinds of update windows you might normally see on your device, but if they appear right as you’ve logged into hotel WiFi, they might be up to something.

In other words, if you aren’t expecting any kind of update pop-up, maybe avoid any of them that appear.