Hotel Wi‑Fi DNS Hijacking Gives Attackers Stealth Access to Microsoft 365
Adversaries are compromising hotel and conference‑center Wi‑Fi gateways, altering their DNS to send users to counterfeit Microsoft 365 login pages. By exploiting a device‑code OAuth flow they can bypass MFA and obtain legitimate tokens, exposing corporate data for traveling employees across multiple industries.