Parodia
  • Communities
  • Multi-communities
  • Support Lemmy
  • Search
  • Login
  • Sign Up
Technology@lemmy.worldbybeep@piefed.world
1 month

Hackers use DNS poisoning on hotel Wi‑Fi to steal Microsoft 365 accounts

reliaquest.com English

cross-posted from: https://piefed.world/c/tech/p/1285059/hackers-use-dns-poisoning-on-hotel-wi-fi-to-steal-microsoft-365-accounts

17
    DNS Poisoning Tactics Expand to Hospitality Wi-Fi | ReliaQuest Threat Spotlight
    reliaquest.com
    Traveling employees are being silently redirected to fake Microsoft 365 login pages via poisoned hotel Wi-Fi — with tradecraft echoing Russia's APT28.
    You must log in or register to comment.

    • fubarx@lemmy.worldEnglish
      30 days

      Don’t EVER use any public wifi without a proper VPN. As soon as you connect, launch the VPN. Hotels, museums, conferences, coffeshop, busses and trains, and library wifis are the worst. Even homes of friends.

      I’ve seen wireshark traffic that would make your blood curl.

        • vext01@feddit.ukEnglish
          29 days

          Where was TLS? The browser should have flagged the site, surely?

          • Appoxo@lemmy.dbzer0.comEnglish
            30 days

            On my last vacation, I was in a hotel you could control the chromecast sessions of other guests.
            Did a bit of testing (maybe also a bit of trolling) to verify the control.
            But considering that…That’s a yikes.

            • AmbiguousProps@lemmy.todayEnglish
              30 days

              I’m going to use the public wifi at defcon with no VPN, wish me luck!

                • Appoxo@lemmy.dbzer0.comEnglish
                  30 days

                  Current era or EOL era?

              • lil_baka@ani.socialEnglish
                30 days

                That’s why I’ve been arguing for a long time that using VPN for everything by default is just basic security.

                  • cynar@lemmy.worldEnglish
                    29 days

                    The only reason I don’t currently is that my phone’s VPN connection doesn’t handle network switching gracefully. Otherwise I try and tunnel all my traffic through my home network.

                    As a useful side effect, I need to expose far less of my IoT devices .

                  • Lexam@lemmy.worldEnglish
                    1 month

                    No, not my Microsoft 365 account!

                    • mynameisbob@lemmy.mlEnglish
                      30 days

                      Do not connect to public wifi if you do use a VPN…

                      • tabular@lemmy.worldEnglish
                        30 days

                        Why did the hotel need over 360 accounts?

                        Spoiler

                        Joke

                          • ryan213@lemmy.caEnglish
                            29 days

                            Dad?

                          • TIEPilot@lemmy.worldEnglish
                            1 month

                            Who uses microsoft 365?

                              • GoatSynagogue@lemmy.worldBannedEnglish
                                30 days

                                Most businesses. Most schools. Most workplaces in general.

                                • GoatSynagogue@lemmy.worldBannedEnglish
                                  30 days

                                  Most businesses. Most schools. Most workplaces in general.

                                  • GoatSynagogue@lemmy.worldBannedEnglish
                                    30 days

                                    Most businesses. Most schools. Most workplaces in general.

                                    • gaylord_fartmaster@lemmy.worldEnglish
                                      30 days

                                      Companies replacing their Citrix infrastructure. Replacing one dumpster fire with another.

                                        • TIEPilot@lemmy.worldEnglish
                                          30 days

                                          Last company I work for replace MS with Google, oh it was a shit show… Had to be on chrome, but chrome doesn’t work with most of our M&C gear so we needed FF. IT pushes back that you have to use chrome. We push back it will cost millions to retool\reprogram the M&C to use chrome and their department can pay for it.

                                          You can guess we got FF installed after that VP to VP conversation.

                                          They are still butt hurt over that when I moved on. IT forgets they have a paycheck because of operation and production…

                                        • wuffah@lemmy.worldEnglish
                                          1 month

                                          It’s got the number of users right there in the name!

                                            • TIEPilot@lemmy.worldEnglish
                                              30 days

                                              Savage!

                                          • const_void@lemmy.mlEnglish
                                            29 days

                                          Technology@lemmy.world

                                          technology@lemmy.world

                                          Subscribe from remote instance

                                          Create post

                                          Report community

                                          Modlog
                                          You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

                                          This is a most excellent place for technology news and articles.


                                          Our Rules


                                          1. Follow the lemmy.world rules.
                                          2. Only tech related news or articles.
                                          3. Be excellent to each other!
                                          4. Mod approved content bots can post up to 10 articles per day.
                                          5. Threads asking for personal tech support may be deleted.
                                          6. Politics threads may be removed.
                                          7. No memes allowed as posts, OK to post as comments.
                                          8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
                                          9. Check for duplicates before posting, duplicates may be removed
                                          10. Accounts 7 days and younger will have their posts automatically removed.

                                          Approved Bots


                                          • @L4s@lemmy.world
                                          • @autotldr@lemmings.world
                                          • @PipedLinkBot@feddit.rocks
                                          • @wikibot@lemmy.world
                                          Visibility: Public

                                          This community is visible to everyone.

                                          • 3.31K users / Day
                                          • 9.41K users / Week
                                          • 16.5K users / Month
                                          • 19K users / 6 months
                                          • 2.33K posts
                                          • 52.5K comments
                                          • 1 local subscriber
                                          • 87.5K subscribers
                                          • Mods:
                                          • L3s@lemmy.world
                                          • BE: 1.0.0-beta.1
                                          • Modlog
                                          • Legal
                                          • Instances
                                          • Docs
                                          • Code
                                          • join-lemmy.org