Aggregator

A Russia-linked group tracked as Midnight Blizzard has compromised hotel and conference Wi-Fi portals worldwide, redirecting guests to phishing pages and fake software updates that steal credentials, session tokens, and other sensitive data. Microsoft says the campaign, dubbed CaptiveCrunch, "targets traveling employees generally rather than a particular sector," reports iTNews. From the report: Midnight Blizzard, tracked internally by Microsoft under its earlier codename NOBELIUM, is attributed by the US and UK governments to Russia's SVR (Sluzhba Vneshney Razvedki) foreign intelligence service. Microsoft's technical analysis said compromises occurred in "several countries" without naming them, and it did not give a total number of affected venues, organisations or individuals. A related investigation published earlier in July by security firm ReliaQuest, and which Microsoft cited in its report, found compromised captive portal gateways across multiple United States cities as well as in India and Saudi Arabia, mostly at hotels. ReliaQuest said the traffic it observed came from organizations across financial services, professional services, legal, health care, energy and retail, suggesting the campaign targets traveling employees generally rather than a particular sector. [...] Where attackers gained a foothold, Microsoft said they deployed two main tools: CornFlake, a Windows remote access trojan (RAT) written in Go capable of keylogging, screenshot and webcam capture, audio surveillance and credential and session token theft. They would also drop ChocoShell, an in-memory PowerShell infostealer targeting browser cookies, saved passwords, Microsoft 365 single sign-on (SSO) tokens and wi-fi credentials. Microsoft also said it has seen indications the attackers might be targeting Android devices with similar prompts urging victims to download and install an APK file.

Read more of this story at Slashdot.

Jeremy Clarkson, Richard Hammond and James May will make a return to their show The Grand Tour next month - two years after saying they wouldn't make any new episodes.

Trainspotting: The Musical has cancelled its upcoming UK show, after dismal reviews and low ticket sales.

British Commonwealth Games swimmer Archie Goodburn broke down in tears as he implored Prime Minister Andy Burnham to increase cancer research funding on Tuesday.

He has been described as having "the biggest heart and cheekiest smile"

The latest YouGov survey shows Reform are backed by 23 per cent of voters, up one percentage point since last week, with Labour remaining on 22 per cent.

St Tropez has long been associated with glamour, luxury and celebrities. But some visitors claim the French Riviera favourite has changed beyond recognition

Around 150 Ryanair passengers faced a 15-hour delay at Krakow Airport after a technical issue affected their flight to Liverpool.

The soldier, believed to be Maxim Alistratov, 21, from Saratov, initially opened fire on soldiers, shooting one dead and wounding another, authorities said.

The 21-year-old died after an incident in the 'very busy public park'

Boy George's manager and best friend PK Kemsley has broken his silence on the star's Jesus Christ Superstar exit amid controversy over his support of Israel.

Mr Burnham, who only entered office on 20 July, is taking a break from his day-to-day duties to travel abroad with his family for a long-planned trip.

Love Island winners Julia and Lorenzo struggled through a very awkward This Morning interview on Monday - amid fears they've already split a week after the show ended.

Drivers are being warned over a five week closure of a 15-mile stretch affecting the A12 at Marks Tey, near Colchester, Essex.

Drivers are being warned over a five week closure of a 15-mile stretch affecting the A12 at Marks Tey, near Colchester, Essex.

The people were seen running next to a busy road

Oscar the French bulldog's ashes were launched on a weather balloon, alongside his favourite Toy Story alien toy, and a pet GPS tracker.

Clive Baxter insists fruit left in the sun on his family farm in Maidstone, Kent, is being 'ruined' due to juice 'boiling' inside as temperatures climb above 30C.

There is a grim familiarity to the tragic deaths of two women in the news this week.

You don't need a crystal ball to predict that the UK is facing a destructive high-tax, high-immigration, socialist government, which could be in place for at least one more parliamentary term.