Top News

Tezzbuzz Desk- Microsoft has warned travelers about hotel and public Wi-Fi networks. Cyber ​​criminals are trying to deliver malware to users' devices through fake login pages and fake software updates.

If you use Wi-Fi in a hotel, conference center, airport or any other public place during travel, then you need to be a little more cautious. Microsoft has detected a cyber campaign in which hackers are taking advantage of shared Wi-Fi networks to direct users to fake websites and fake login pages. Through this, passwords, account details and other sensitive information can be stolen.

How is spying happening through CaptiveCrunch campaign?

According to Microsoft Threat Intelligence, such activities have been observed in some networks to the hospitality sector since the beginning of May 2026. Places like hotels and conference centers often require users to visit a login page or agree to certain rules before using the Internet.

Hackers are taking advantage of this system. By tampering with the DNS and web traffic of the network, the user can be sent to a fake page instead of the real website. These pages may appear to be genuine and may ask the user to enter a Microsoft account or other login information.

Malware in the device in the name of fake update

The second method of cyber attack is even more dangerous. The user may suddenly be shown a message on the screen that an update of Windows, browser or any security software is available. After this he is asked to download or install the update. If the user downloads this file without checking it, then dangerous malware can reach his system. Microsoft has linked this activity to Storm-2945. During the investigation, Windows based Remote Access Trojan i.e. RAT named CornFlake has also been detected.

What is the danger of CornFlake malware?

Once CornFlake reaches the infected device, attackers can try to obtain many types of sensitive information. This may include files, passwords, and session information. Apart from this, activities like recording the information typed on the keyboard and gaining remote access to the system can also be done.

Malware can adopt different methods to embed itself in the system and try to appear as a legitimate Windows service or process. In such a situation, it may be difficult for the user to detect it during normal use.

Even Android phones are not completely safe

The threat is said to be not limited to Windows computers only. Microsoft has received indications that similar technology could also target people using Android devices. In some cases the user may be asked to download and install an Android APK file on a website. If the user installs such a file without verifying the source, the security of the phone may be at risk.

Special attention on corporate travelers

According to Microsoft, corporate travelers are particularly likely to be targeted in such attacks. Through hotel and other public Wi-Fi networks, attackers can try to access people whose devices contain work emails, cloud accounts, important documents, and other sensitive data.

Keep these things in mind while using hotel Wi-Fi

• Carefully check the login page that suddenly appears on public Wi-Fi.
• Do not download software or browser updates from any unknown website.
• Always update Windows or any other software from an official source.
• Do not install unknown APK files on Android phones.
• Use extra caution when using sensitive banking or office accounts on public networks.
• If possible, use a mobile hotspot or a trusted network.
• Keep your device and security software updated.

That is, the hotel's Wi-Fi definitely provides free internet facility, but even a little carelessness to avoid cyber attacks under its cover can prove costly.