AI Summary

Microsoft has identified a worldwide campaign that targets hospitality Wi‑Fi networks as being carried out by the Russian threat actor Midnight Blizzard, also known as APT29. The attackers modify DNS settings on Wi‑Fi devices to redirect traffic and capture credentials. This method allows them to steal Microsoft 365 accounts from users connected to hotel networks. The activity was first reported by cybersecurity firm ReliaQuest, which documented the DNS manipulation technique. Microsoft’s attribution links the campaign to Midnight Blizzard.

AI summaries can be wrong sometimes—always verify important details using the source article.