Hackers use DNS poisoning on hotel Wi‑Fi to steal Microsoft 365 accounts
3 months ago by beep to c/technology
cross-posted from: https://piefed.world/...
I'm going to use the public wifi at defcon with no VPN, wish me luck!
On my last vacation, I was in a hotel you could control the chromecast sessions of other guests.
Did a bit of testing (maybe also a bit of trolling) to verify the control.
But considering that...That's a yikes.
The only reason I don't currently is that my phone's VPN connection doesn't handle network switching gracefully. Otherwise I try and tunnel all my traffic through my home network.
As a useful side effect, I need to expose far less of my IoT devices .
Do not connect to public wifi if you do use a VPN...
Most businesses. Most schools. Most workplaces in general.
Companies replacing their Citrix infrastructure. Replacing one dumpster fire with another.
Last company I work for replace MS with Google, oh it was a shit show... Had to be on chrome, but chrome doesn't work with most of our M&C gear so we needed FF. IT pushes back that you have to use chrome. We push back it will cost millions to retool\reprogram the M&C to use chrome and their department can pay for it.
You can guess we got FF installed after that VP to VP conversation.
They are still butt hurt over that when I moved on. IT forgets they have a paycheck because of operation and production...
@lemmy.world
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
go to feed...
@lemmy.world
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
go to feed...
Don't EVER use any public wifi without a proper VPN. As soon as you connect, launch the VPN. Hotels, museums, conferences, coffeshop, busses and trains, and library wifis are the worst. Even homes of friends.
I've seen wireshark traffic that would make your blood curl.
save