← Back to Feed
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
July 31, 2026 · Microsoft Security · Severity: HIGH
<button class="btn-collapse" type="button" aria-expanded="true".
Key Takeaways
- This The CaptiveCrunch campaign Storm-2945 and Midnight Blizzard CaptiveCrunch tradecraft and tooling How to protect against CaptiveCrunch.
- Despite some tactic, technique, and procedure (TTP) similarities to the Forest Blizzard DNS hijacking operation that we publicly disclosed in April 20.