AI-assisted espionage targets travelers and government personnel

The hospitality-network campaign

Microsoft traced an AI-assisted espionage campaign to Storm-2945, which it assesses is part of Midnight Blizzard. Its July account describes phishing activity from February and attacks on hotel and other guest networks from early May. The compromised networks redirected travelers toward credential theft and malware. Microsoft Threat Intelligence ↗

Microsoft reports compromised hospitality networks in several countries, but says the initial route into those networks remained under investigation. Its defensive response included published detection and mitigation guidance. Microsoft credits Anthropic and OpenAI for assistance, so these overlapping accounts are not wholly independent. Microsoft Threat Intelligence ↗

Related government intrusion

Anthropic, tracking related activity as GTG-20006, reports that attackers took over a North African government authority's central account server and exported its credential database. Anthropic ↗