Vacationers beware — Microsoft specialists warn resort Wi-Fi will be hijacked to contaminate your gadgets with harmful malware

• Microsoft reviews Russian APT29 (Midnight Blizzard) hijacking captive portals in resorts and convention facilities
• Victims redirected to faux Microsoft 365 logins or bogus replace pages, spreading CornFlake and CocoShell malware
• CornFlake steals recordsdata, credentials, and gadget information; CocoShell targets browser cookies, passwords, and Microsoft tokens

Menace actors are taking up Wi-Fi networks in resorts and convention facilities and utilizing the log-in portals to steal credentials and deploy information-stealing malware, specialists have claimed.

Researchers from Microsoft have revealed a brand new report outlining how they noticed Russian state-sponsored actors, referred to as Midnight Blizzard or APT29, attacking captive portal tools – networking {hardware} and software program that manages the login web page customers see earlier than accessing public Wi-Fi.