Russian hackers hijack hotel Wi-Fi networks to steal Microsoft 365 tokens

Microsoft says Storm-2945 hijacked captive-portal Wi-Fi networks at hotels, conference centers, and other shared venues to redirect users to malware and credential-theft pages. The campaign may target the accounts of corporate travelers.