By TOI Tech Desk
Publication Date: 2026-08-10 02:24:00
Microsoft’s Threat Intelligence team has issued a warning to travelers following a series of sophisticated cyberattacks targeting guest Wi-Fi networks at hotels and hospitality venues worldwide. The internet hijacking campaign, dubbed ‘CaptiveCrunch’, has been active since at least May and is attributed to Storm-2945, a sub-cluster claimed to be of the Russian hacking group Midnight Blizzard (also known as APT29 or Cozy Bear).According to Microsoft, the hacker group is executing “widespread but targeted” traffic manipulation attacks through Public guest networks and captive portal screens – the web pages that appear when users attempt to log onto hotel Wi-Fi or those at public places like airports, tourists venues and more. “To date, Microsoft has identified widespread compromise of Wi-Fi networks at hospitality-related organizations and other networks serviced by captive portal equipment in several countries. ReliaQuest has identified this activity not only at hotels,…
