Public Wi‑Fi Risks Escalate as Captive Portal Attacks Target Travelers

Microsoft Threat Intelligence warns of the CaptiveCrunch campaign that targets hospitality wifi networks (hotels, airports, conference centers) by abusing captive portal prompts to phish credentials, push malware, and perform man-in-the-middle attacks. Travelers are urged to rely on private connections (mobile hotspots or cellular data), use an enterprise-managed travel router or VPN with a kill switch if public wifi must be used, carefully inspect login prompts, avoid downloading software through captive portals, and keep devices and apps up to date to minimize risk.