Compromised Public Wi-Fi Gateways Exploited for Corporate Credential Harvesting

Threat actors are leveraging compromised public Wi-Fi infrastructure to intercept and harvest Microsoft 365 credentials from traveling corporate employees. The campaign highlights a persistent vulnerability in public network hardware that facilitates man-in-the-middle attacks against enterprise accounts.