Midnight Blizzard Targets Hotel Wi-Fi Networks to Steal Microsoft 365 Sessions — Your Next Business Trip Is the Attack Surface
Microsoft attributes a global hotel Wi-Fi compromise campaign to APT29. The ChocoShell and CornFlake malware strains harvest M365 sessions from business travelers connecting to the lobby network.