Breach

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Microsoft Threat Intelligence · July 31, 2026 · International · Data Breaches

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and steal credentials in an operation we call CaptiveCrunch. The post CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach #security

Read the original at Microsoft Threat Intelligence → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Airline Went Bankrupt. Your Email Did Not.

Google bid $10 million for a dead airline's inboxes. The fight over that sale is about what an employee's email becomes once the employer no longer exists.

September 12, 2026· 6 min read Read →

The Law Protects the Searcher, Not the Searched

A face-search site left millions of photos open. For many of the people in those photos, the law offers remarkably little recourse.

August 23, 2026· 6 min read Read →

The Federal Trade Commission has rescinded a 2021 policy statement that had extended the Health Breach Notification Rule to cover health apps and connected devices. The original statement had broadened consumer protections by requiring health technology companies outside traditional HIPAA coverage to notify users of data breaches.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers

#breach#healthcare#regulation Read original →

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Analysis

The Airline Went Bankrupt. Your Email Did Not.

The Law Protects the Searcher, Not the Searched

Related stories

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

The internet of (compromised) things: securing IoT when you can’t trust (any) “thing”

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Pro-Ukraine Hacking Cat group deploying new malware against Russian targets

FTC Rescinds 2021 Policy Statement on Health App Data Breaches