DNS Manipulation in Hotel WLANs: APT28 Steals Microsoft 365 Credentials27. July 2026CybersecurityAPT28 manipulates hotel WLANs through DNS redirection and device code authentication to steal OAuth tokens and bypass MFA—VPN tunneling and encrypted DNS are required. Share on: