TLDR Tech / InfoSec
Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts
ReliaQuest is reporting on a new phishing campaign where attackers are changing the DNS settings on hotel Wi-Fi systems to redirect Microsoft 365 logins to fake, attacker-controlled pages. The campaign uses a device code flow where users are prompted to approve the login request to bypass MFA requirements.
Read the full story