Midnight Blizzard-Linked Server Was Still Serving Malware Weeks After Exposure, ReversingLabs Finds
ReversingLabs found a staging server in a campaign Microsoft ties to a Midnight Blizzard sub-cluster still serving a PowerShell stager on Oct 5, more than two months after disclosure. The campaign hijacks hotel Wi-Fi captive portals. Here is how to check your devices.