Threat actors compromise hotel Wi-Fi DNS to facilitate Microsoft 365 credential harvesting

Threat actors are manipulating DNS configurations on hotel and conference center network infrastructure to redirect users to fraudulent Microsoft 365 authentication portals. This campaign exploits trust in public Wi-Fi environments to bypass standard security perimeters, though the scale of the campaign and the specific threat actor group remain unconfirmed.