MEDIUMPhishing
Global

Hacking Public Wi-Fi DNS to Steal Credentials

·Source: Schneier on Security

Updated:

Executive Summary

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and changing their DNS settings. The goal is to redirect users to fake login pages and steal their credentials.

Analysis

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and changing their DNS settings. The goal is to redirect users to fake login pages and steal their credentials.
Source Attribution

Originally published by Schneier on Security on Aug 17, 2026.

Related Threats

MEDIUMPhishing

How QR-code phishing can slip past corporate security measures

Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.

WeLiveSecurity (ESET)
MEDIUMPhishing

The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI

Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail, Drive, and connected systems. Material Security explains why organizations need defenses that cover the entire Workspace attack chain. [...]

BleepingComputer
MEDIUMPhishing

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) windows to steal Google and Facebook credentials and, in more advanced cases, relay multi-factor authentication (MFA) prompts in real time. CTM360, which detailed the activity in a new report titled RecruitTrap, said it

The Hacker News