Hotels Under Attack: Hackers Pose as Guests with Poisoned ZIP Files
Microsoft Threat Intelligence warns of an active campaign since April where attackers pose as guests to infect hotel systems with a persistent Node.js implant. The malware disables Defender, collects information, and forces shutdowns, pointing to a reconnaissance phase before a potential larger attack.

