Hackers establish their persistence in the hospitality industry and hotels by posing as guests with poisoned ZIP archives, but no one knows what their plan is.
Microsoft Threat Intelligence warns of a phishing campaign targeting hotel staff in Europe and Asia with emails themed around customer complaints. Attackers abuse services like Calendly and Google Redirects to bypass authentication controls, delivering photo-themed ZIPs that install a persistent Node.js implant. Malware disables Defender, runs C2 markup, collects system information, and forces shutdowns; signs […]










