Attackers can steal Microsoft 365 accounts from guests through DNS poisoning on compromised Wi-Fi gateways without touching their devices or the corporate network.
Attackers compromise Wi-Fi gateways on travel networks to steal Microsoft 365 accounts via DNS redirection — an attack surface below endpoint visibility with potential for account cascades in enterprise networks.
