--- title: Schneier on Security | daily.dev description: Criminals are compromising public Wi-Fi routers at hotels and conference centers by changing their DNS settings, redirecting connected users to fake login... canonical: https://daily.dev/posts/schneier-on-security-voqfhigtw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Schneier on Security | daily.dev og:description: Criminals are compromising public Wi-Fi routers at hotels and conference centers by changing their DNS settings, redirecting connected users to fake login... og:url: https://daily.dev/posts/schneier-on-security-voqfhigtw og:image: https://api.daily.dev/og/posts/VOQfHIGTW.png og:image:alt: Schneier on Security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Schneier on Security **[Schneier on Security](https://daily.dev/sources/schneier)** · 1 min read · 0 upvotes · 0 comments ## Summary Criminals are compromising public Wi-Fi routers at hotels and conference centers by changing their DNS settings, redirecting connected users to fake login pages designed to steal Microsoft 365 and other credentials. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How are attackers stealing Microsoft 365 credentials through hotel Wi-Fi? Attackers compromise the Wi-Fi routers or gateway devices at hotels and conference centers and change their DNS settings. This reroutes connected users to fake login pages that mimic legitimate services like Microsoft 365, capturing usernames and passwords when victims attempt to sign in over what they believe is trusted public network infrastructure. _Security teams tracking phishing and DNS-hijacking tactics like this follow the latest threat writeups on daily.dev._ ## Similar posts on daily.dev - [Crooks compromise WordPress sites, spread infostealers](https://daily.dev/posts/crooks-compromise-wordpress-sites-spread-infostealers-usqnj2nup) · The Register · 0 upvotes · 0 comments - [Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data](https://daily.dev/posts/russian-hackers-create-4-300-fake-travel-sites-to-steal-hotel-guests-payment-data-hjxtxdah2) · The Hacker News · 2 upvotes · 0 comments - [Attackers bring their own passwords to Cisco and Palo Alto VPNs](https://daily.dev/posts/attackers-bring-their-own-passwords-to-cisco-and-palo-alto-vpns-3uy5pjs7r) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing), [#dns](https://daily.dev/tags/dns) [View this post on daily.dev](https://daily.dev/posts/schneier-on-security-voqfhigtw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Schneier on Security","url":"https://daily.dev/posts/schneier-on-security-voqfhigtw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/schneier-on-security-voqfhigtw"},"datePublished":"2026-08-17T11:21:46.379Z","dateModified":"2026-09-14T06:41:51.205Z","description":"Criminals are compromising public Wi-Fi routers at hotels and conference centers by changing their DNS settings, redirecting connected users to fake login...","image":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","thumbnailUrl":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","isAccessibleForFree":true,"articleSection":"Schneier on Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Schneier on Security","logo":"https://media.daily.dev/image/upload/s--0aZDA7eZ--/f_auto/v1758461069/logos/schneier","url":"https://daily.dev/sources/schneier"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/schneier-on-security-voqfhigtw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing,dns","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Schneier on Security","item":"https://daily.dev/sources/schneier"},{"@type":"ListItem","position":3,"name":"Schneier on Security"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/schneier-on-security-voqfhigtw#faq","mainEntity":[{"@type":"Question","name":"How are attackers stealing Microsoft 365 credentials through hotel Wi-Fi?","acceptedAnswer":{"@type":"Answer","text":"Attackers compromise the Wi-Fi routers or gateway devices at hotels and conference centers and change their DNS settings. This reroutes connected users to fake login pages that mimic legitimate services like Microsoft 365, capturing usernames and passwords when victims attempt to sign in over what they believe is trusted public network infrastructure. Security teams tracking phishing and DNS-hijacking tactics like this follow the latest threat writeups on daily.dev."}}]} ```