Israeli Cyber Authority Warns Against Connecting to Public Wi-Fi Amid Russian Hacking Campaign

The Israeli National Cyber Directorate has issued a warning about a Russian-linked cyberattack campaign targeting users connecting to public Wi-Fi networks in hotels, airports, and other public places. Microsoft identified the campaign, named CaptiveCrunch, which uses fake pop-up windows and login screens to trick users into downloading malicious software, running commands, or entering passwords. This campaign has been active since May and primarily affects Wi-Fi networks in the hospitality sector, including hotel networks.

According to Microsoft, attackers use deceptive pop-ups upon connection to public Wi-Fi to prompt users to download harmful files, potentially allowing them to capture screenshots, log keystrokes, and in some cases, remotely control devices. Fake login pages may also steal users' personal email credentials. The National Cyber Directorate emphasized that connecting to Wi-Fi should never require software installation and advised users not to execute unknown commands or enter passwords on suspicious pages.

Users are urged to update their devices only through official app stores or device settings and to prefer cellular networks or private hotspots for sensitive activities. Anyone encountering unusual messages after connecting to public Wi-Fi should immediately close the page and avoid following any instructions presented. The warning aims to raise awareness and prevent users from falling victim to this sophisticated cyber threat.

Summary: The Israeli National Cyber Directorate warns of a Russian cyberattack campaign exploiting public Wi-Fi networks in hotels and airports, urging users to avoid downloading suspicious software or entering passwords on fake login pages to prevent device compromise.