Cybercriminals are manipulating DNS settings on Wi-Fi devices in hotels and conference centers to redirect users to fake Microsoft 365 login pages. This sophisticated phishing technique allows attackers to harvest credentials from unsuspecting victims. The attack leverages compromised network infrastructure to present a convincing, legitimate-looking login portal, making it difficult for users to detect the deception.