Russian State Actors Target Business Travellers via Hotel Wi-Fi

Podcast: Threat Analysis : Cyber News for Small Business · The Small Business Cyber Security Guy

Opublikowano: 2026-09-11

Russian State Actors Target Business Travellers via Hotel Wi-Fi This episode examines three active threat campaigns with direct SMB relevance. Russian state group APT29 (Midnight Blizzard) is conducting large-scale credential harvesting through compromised hotel and conference Wi-Fi networks across the UK and Europe, specifically targeting business travellers. The operation exploits captive portal authentication flows to harvest Microsoft 365 credentials through spoofed login pages and device code phishing that bypasses MFA. A second campaign demonstrates AI-orchestrated exploitation of PaperCut print management software, progressing from vulnerability research to remote code execution in under four hours across 440+ installations. The episode also...