Russian state-sponsored hackers have been compromising hotel Wi-Fi networks around the world to steal travelers' login credentials and infect devices with espionage malware, researchers have found. According to the researchers, the attackers manipulate internet traffic on compromised networks to redirect victims to fake Microsoft login pages or fraudulent browser and operating system update screens designed to deliver malware. The hackers use two main techniques to compromise victims' devices, according to Microsoft. In one, victims are redirected to fake Microsoft authentication pages, allowing the attackers to intercept login credentials and gain access to Microsoft 365 accounts. The second, ChocoShell, is an information stealer designed to harvest browser cookies, saved passwords, Microsoft 365 single sign-on tokens, and Wi-Fi credentials.