CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
2026-08-01T02:52:10Z•dbae2bd2f991646e00c9de37c94abd6d4c7e4ba5dfc27c108f8bfab991390a61
ACR-StealerAI-red-teamingAI-securityCaptiveCrunchClickFixMidnight-BlizzardStorm-2945authentication-token-theftbrowser-credential-stealercredential-theftincident-responseleast-privilegemalware-deliveryphishingsocial-engineeringthreat-intelligence
What happened
Microsoft Security Blog RSS content covering July 2026 security developments. Notable threat intelligence reports describe Midnight Blizzard sub-cluster Storm-2945 compromising hospitality sign-in portals to deliver malware and steal credentials, and ACR Stealer campaigns using ClickFix lures to harvest browser credentials, authentication tokens, and sensitive documents. Additional posts address phishing trends, AI security, red teaming, least privilege for AI agents, and cyber resilience.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- dbae2bd2f991646e00c9de37c94abd6d4c7e4ba5dfc27c108f8bfab991390a61
- Enrichment time
- 2026-08-01T02:52:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.