Latest / ShadowTalk: Powered by ReliaQuest
Compromised Hotel Gateways, Fake Microsoft Domains, and the APT28-Adjacent Campaign That Bypasses MFA Without a Phishing Click
An employee connects to hotel Wi-Fi, receives a familiar Microsoft 365 sign-in prompt, and authenticates. No phishing email. No malicious link. No suspicious attachment. Yet an attacker walks away with a valid, MFA-satisfied session token.
Join hosts Alexandra Moore and John Dilgen as they break down:
How compromised hotel and conference-center Wi-Fi gateways silently redirect Microsoft authentication traffic
Why hardcoded DNS, opportunistic encrypted DNS, and MFA may not stop the attack
How device-code phishing and WPAD abuse expand the campaign’s reach
Practical defenses—including…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.