Zscaler details CaptiveCrunch campaign targeting hotel Wi-Fi users

Zscaler has published an analysis of CaptiveCrunch, a credential theft campaign attributed to Storm-2945, a sub-cluster of the Russian-linked Midnight Blizzard group. The campaign compromises captive portal networks at hotels and conference centres to redirect victims to phishing pages for Microsoft 365 credentials, device code phishing, and malware delivery. Zscaler provides detection and mitigation guidance for its platform.