Microsoft: Russian Hackers Leveraging AI to Automate Global Hotel Cyberattacks
cyb3rops · x · 2026-08-01
Microsoft Security Blog detailed a widespread traffic manipulation campaign by the Russian threat actor Midnight Blizzard targeting travelers at hotels worldwide.
Dubbed CaptiveCrunch, the operation has been active since early May 2026. It exploits captive portals to manipulate DNS and HTTP traffic, redirecting users to attacker-controlled infrastructure to deliver malware or intercept authentication flows.
Crucially, the report notes that the group is using AI to support a significant portion of their operations, allowing their techniques and infrastructure to move and change dynamically at an unprecedented pace.
More from Safety
- Users report Gemini's memories can't actually be deleted even after wiping chat history — ThrowRA_Purpose2025 · 2026-10-16
- You consented, but your friends didn't: Meta's Muse sparks AI privacy debate — LuizaJarovsky · 2026-10-16
- AI agents aren't 'going rogue' — frontier labs are skipping security basics — Sam_Witteveen · 2026-10-16
- Proofpoint to buy Varonis for $6.3B in cash, a 52% premium, closing in 2027 — shashib · 2026-10-16
- China's MofCom & MIIT update AI export controls, covering LLMs and high-sensitivity agents — terryyuezhuo · 2026-10-16
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16