04/10/2026
Don't trust hotel Wi-Fi. It can be compromised even when you've joined the correct network.
Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.
Once the login system has been compromised, guests can be redirected to a fake Microsoft 365 sign-in page or shown a fake browser update that installs malware.
The timing makes the request believable. You've just connected, the hotel page opens and it says an update is needed before you can continue.
Checking the network name with reception won't help because the hotel's real Wi-Fi is involved.
Use your phone's hotspot for work whenever possible. If you have to use hotel Wi-Fi, never enter your work password into the hotel registration page.
And if the page asks you to download an update, certificate or security tool, disconnect. Joining Wi-Fi shouldn't require you to install anything.
If your staff travel with work laptops, send us a message before their next trip. We'll make sure the devices are properly protected.