CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
2026-08-03T20:52:10Z•72e3608be4e2d23ccfb746ca1a9b7c2173777201b04426d16c8502c2b699d604
ACR StealerAI red teamingAI securityCaptiveCrunchClickFixMicrosoft Security BlogMidnight BlizzardStorm-2945Teams social engineeringauthentication token theftbrowser credential theftcredential thefthospitality sectorincident responseleast privilegemalware deliveryphishing
What happened
Microsoft Security Blog RSS collection covering July 2026 security developments, including a Midnight Blizzard/Storm-2945 campaign compromising hospitality sign-in portals to deliver malware and steal credentials, ACR Stealer ClickFix intrusions targeting browser credentials and authentication tokens, phishing and Teams-based social engineering trends, and guidance on AI security, agent least privilege, red teaming, and cyber resilience.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 72e3608be4e2d23ccfb746ca1a9b7c2173777201b04426d16c8502c2b699d604
- Enrichment time
- 2026-08-03T20:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.