Israeli Cyber Authority Warns Against Connecting to Public Wi-Fi Amid Russian Hacking Campaign

The Israeli National Cyber Directorate has issued a warning about a Russian-linked cyberattack campaign targeting public Wi-Fi networks in hotels, airports, and other public places. Microsoft identified the campaign, named CaptiveCrunch, which involves fake pop-up windows and login screens designed to trick users into downloading malicious software, running commands, or entering passwords. The campaign has been active since May and has affected Wi-Fi networks in the hospitality sector, including hotel networks.

According to Microsoft, attackers use deceptive pop-ups that appear upon connecting to Wi-Fi, attempting to steal screenshots, keystrokes, and in some cases, remotely control devices. Fake login pages may also capture users' personal email addresses. The National Cyber Directorate emphasized that legitimate Wi-Fi connections should never require software installation or command execution.

Users are advised not to enter passwords or verification codes on suspicious pages, avoid running unknown commands, and update devices only through official settings or app stores. For sensitive activities, it is recommended to use cellular networks or private hotspots. Anyone encountering unusual messages after connecting to public Wi-Fi should immediately close the page and refrain from following its instructions.