SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Aggregated malware and security news: attackers have been compromising hotel/conference Wi‑Fi gateways to redirect guests to fake Microsoft 365 login pages and harvest credentials; US agencies warn Iran‑linked actors are actively targeting internet‑exposed water and energy control systems (CISA/FBI/NSA/DOE advisory); Origin Energy disclosed a breach impacting customer data (~2M records claimed stolen); Hunt.io found an intrusion against Thailand’s Ministry of Finance using a Hermes AI agent and staged Hades implant; UAC‑0099 is distributing malware via a fake Notepad++ plugin with an anti‑anal