CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
2026-08-04T08:52:10Z•7fecc10a151d2b3d14f7a26b5015847df99ba87ba001818c7c14fc708917a1f0
ACR-StealerAI-securityCaptiveCrunchClickFixMidnight-BlizzardStorm-2945credential-thefthospitality-sectoridentity-and-access-managementincident-responsemalware-deliveryphishingsocial-engineeringthreat-intelligence
What happened
Microsoft Security Blog RSS feed covering July 2026 security developments, including the CaptiveCrunch campaign by Midnight Blizzard/Storm-2945 targeting hospitality sign-in portals to deliver malware and steal credentials, ACR Stealer ClickFix campaigns targeting browser credentials and tokens, phishing and Teams-based social engineering trends, and guidance on AI security and least privilege for AI agents.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 7fecc10a151d2b3d14f7a26b5015847df99ba87ba001818c7c14fc708917a1f0
- Enrichment time
- 2026-08-04T08:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.