One approved MFA push gave ShinyHunters-linked callers a brief view-only session inside ReliaQuest.
Threat actors compromised captive Wi-Fi gateways at hotels to silently redirect business travelers to fake Microsoft 365 login pages.
Researchers discovered that the attacker waited 75 days after initial access before deploying a custom web shell framework designed to…