The Check-In Trap: How Hijacked Hotel Wi-Fi Delivers Silent Spyware

A new wave of cyberattacks is targeting travelers by compromising hotel Wi-Fi networks to distribute a dangerous remote access trojan named CornFlake. Disguised as legitimate browser updates, the malware allows attackers to take full control of a victim's device, enabling the capture of webcam feeds, audio recordings, and keystrokes. Beyond simple surveillance, the campaign focuses on stealing cloud authentication tokens and abusing device codes to infiltrate secure corporate environments. This method of delivery exploits the inherent trust users place in hospitality networks, highlighting a significant security risk for those working remotely while traveling.