One Compromised Wi-Fi Gateway Can Redirect Every Hotel Guest to Attacker Controlled Servers

One compromised hotel Wi-Fi gateway can silently redirect every guest to attacker controlled servers, putting corporate accounts at risk even when users think they are browsing safely. The campaign starts with a simple idea that many travelers overlook. When you connect to hotel or conference Wi-Fi, you trust that gateway to handle your traffic honestly. In this case, attackers abuse that trust to quietly steer every guest’s web requests through infrastructure they control, with no malware alert or phishing email required. Threat actors are poisoning DNS responses at captive portal appliances in hotels, conference centers, and other shared venues to harvest Microsoft 365 credentials…