Hotel Wi‑Fi steals Microsoft 365 logins, ShinyHunters sextortion spam, and Chick‑fil‑A stuffed again
Hotel and conference Wi‑Fi networks are being hijacked to harvest Microsoft 365 credentials by compromising captive portals and DNS, redirecting travelers to convincing lookalike logins and even abusing Microsoft's device code flow to obtain OAuth tokens in ways MFA may not stop. Plus, an Illinois man received 76 months in prison for phishing into hundreds of women's Snapchat accounts to steal explicit content and run a for-profit account access scheme. Also: a sextortion email wave impersonates ShinyHunters using real breach references while making fake device-compromise claims; ransomware disrupted Japanese frozen food supplier Nichirei shipments, affecting KFC franchises; and Chick-fil-A disclosed a June credential-stuffing incident impacting 13,322 loyalty accounts, resetting access, removing saved payments, restoring rewards, and adding free rewards as an apology.
00:00 Top Stories Intro
00:28 Hotel Wi-Fi Credential Trap
01:50 Public Wi-Fi Advice Debate
03:16 Snapchat Phishing Sentencing
05:18 ShinyHunters Sextortion Scam
07:09 Ransomware Hits Food Supply
09:16 Chick-fil-A Stuffing Fallout
11:12 Wrap Up and Sign Off
Read the original article: