What The Tech: Microsoft warns of Wi-Fi hackers
BY JAMEY TUCKER, Consumer Tech Reporter
Travelers may want to think twice before automatically connecting to hotel Wi-Fi. Microsoft says it uncovered a hacking campaign targeting commercial routers used by hotels and other businesses in the hospitality industry.
The activity was first detected in early May and was linked to a well-known Russian hacking group. Hotel Wi-Fi is designed to be convenient. The network name and password are often posted at the front desk, printed on a room key sleeve, or displayed inside the room. Guests can connect within seconds, often without giving the security of the network much thought.
According to Microsoft, attackers were able to compromise some hotel networks and redirect guests to convincing fake websites and pop-up messages. One fake page appeared to come from Google and told users they needed to complete a security check before continuing. Another displayed a false Windows update and instructed the user to install a driver or click a button to fix a supposed problem.
Clicking one of those messages could give hackers access to the computer.
Microsoft says the malicious software could allow attackers to steal passwords and other credentials, collect files, record keystrokes, run programs, and potentially activate a device’s microphone or camera.
What to do when using hotel Wi-Fi
Microsoft recommends avoiding software updates and downloads while connected to public Wi-Fi. Travelers should also avoid clicking unexpected pop-ups, security alerts, or update messages.
A legitimate update should be installed through the computer or phone’s settings, not through a surprise browser window.
If a suspicious pop-up appears:
1. Do not click any buttons inside the message.
2. Do not enter a password or other personal information.
3. Close the browser or force it to quit.
4. Disconnect from the Wi-Fi network.
5. Select “Forget this network” in the device’s Wi-Fi settings.
Forgetting the network prevents the phone or computer from reconnecting to it automatically later.
Consider using a travel router
A portable travel router can provide another layer of separation between your devices and a hotel’s network. Some hotel rooms still have an Ethernet port. A traveler can plug the portable router into that port and connect phones, computers, tablets, and streaming devices to a private Wi-Fi network
created by the router.
Many travel routers can also connect wirelessly to the hotel’s Wi-Fi and then rebroadcast the connection through a separate private network. Prices generally start at around $50. A personal cellular hotspot is another option, especially when checking email, banking, medical records, or other sensitive accounts.
A hotel Wi-Fi password does not guarantee security
A network password may prevent people outside the hotel from connecting, but it does not guarantee that the router or network itself has not been compromised. Microsoft advises travelers to assume that public Wi-Fi networks in hotels and other hospitality locations may not always be trustworthy.
The safest rule is simple: if an unexpected warning, update, or login page suddenly appears while you are using public Wi-Fi, do not click it.
