CaptiveCrunch: Microsoft links hospitality network manipulation to Midnight Blizzard
Microsoft's July investigation links CaptiveCrunch to a Midnight Blizzard sub-cluster, describing manipulated guest networks, fake updates, persistent malware and device-code phishing.