Hackers use DNS poisoning on hotel Wi‑Fi to steal Microsoft 365 accounts

cross-posted from: https://piefed.world/c/tech/p/1285059/hackers-use-dns-poisoning-on-hotel-wi-fi-to-steal-microsoft-365-accounts

reliaquest.com/blog/threat-spotlight-dns-poisoning-tactics-expand-to-hospitality/

Don’t EVER use any public wifi without a proper VPN. As soon as you connect, launch the VPN. Hotels, museums, conferences, coffeshop, busses and trains, and library wifis are the worst. Even homes of friends.

I’ve seen wireshark traffic that would make your blood curl.

I’m going to use the public wifi at defcon with no VPN, wish me luck!