LEGALAUDIT

Betrugsradar

Wie erkennen Sie Hackers hijack hotel Wi Fi to steal Microsoft 365 accounts via fake login pages?

Veröffentlicht am

Kurzfassung

Travelers connecting to hotel or conference Wi Fi networks are being silently redirected to fake Microsoft 365 login pages. Attackers compromise the Wi Fi gateway's DNS settings so that the legitimate Microsoft URL resolves to a phishing...

Wie es funktioniert

Travelers connecting to hotel or conference Wi Fi networks are being silently redirected to fake Microsoft 365 login pages. Attackers compromise the Wi Fi gateway's DNS settings so that the legitimate Microsoft URL resolves to a phishing...

Warnzeichen

  • Microsoft 365 login page looks slightly off, has an unfamiliar domain, or shows up after connecting to hotel Wi Fi. An unexpected "device code" approval prompt appears on screen asking you to confirm a sign in you did not start. Your browser or apps behave oddly, show proxy errors, or Windows tries to auto configure a network proxy (WPAD)

Was tun

  1. 1Always use a trusted, full tunnel VPN with encrypted DNS (DoH/DoT) before joining public Wi Fi. Never approve Microsoft device code prompts you did not initiate
  2. 2cancel and change your password. Disable WPAD in Windows and turn off the Device Code authentication flow in Microsoft Entra ID when not required

Quelle

bleepingcomputer

Quelle geprueft vom Mythos Forensic Team

https://www.bleepingcomputer.com/news/security/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts/

FAQ

Ist Hackers hijack hotel Wi Fi to steal Microsoft 365 accounts via fake login pages ein reales Betrugsmuster?

Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.

Was sind die ersten Warnzeichen?

Microsoft 365 login page looks slightly off, has an unfamiliar domain, or shows up after connecting to hotel Wi Fi. An unexpected "device code" approval prompt appears on screen asking you to confirm a sign in you did not start. Your browser or apps behave oddly, show proxy errors, or Windows tries to auto configure a network proxy (WPAD)

Was sollte ich zuerst tun?

Always use a trusted, full tunnel VPN with encrypted DNS (DoH/DoT) before joining public Wi Fi. Never approve Microsoft device code prompts you did not initiate; cancel and change your password. Disable WPAD in Windows and turn off the Device Code authentication flow in Microsoft Entra ID when not required

Kann LegalAudit meinen Fall pruefen?

Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.