HACKERS HIJACK HOTEL WI-FI DNS TO STEAL MICROSOFT 365 ACCOUNTS

Summary from the TLDR InfoSec newsletter

ReliaQuest is reporting on a new phishing campaign where attackers are changing the DNS settings on hotel Wi-Fi systems to redirect Microsoft 365 logins to fake, attacker-controlled pages. The campaign uses a device code flow where users are prompted to approve the login request to bypass MFA requirements.