IOC Radar
TLP:WHITE7 IOCs

Hackers Hijack Hotel Wi-Fi Gateways to Steal Microsoft 365 Accounts Without Phishing

CP
Cyber Press
Published July 24, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT28INFRASTRUCTURE38.146.28.7531.57.243.154owa-ms365.comCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise7

TypeIndicatorConfidenceScoreFirst Seen
IP38.146.28.75
exploitintel-blogmalware
High
58
Jul 24, 26
IP31.57.243.154
exploitintel-blogmalware
High
58
Jul 24, 26
Domainowa-ms365.com
intel-blogmalwarenetwork
High
58
Jul 24, 26
IP104.194.159.150
exploitintel-blogmalware
High
58
Jul 24, 26
Domainm365-owa.com
intel-blogmalwarenetwork
High
58
Jul 24, 26
Domainms365-live.com
intel-blogmalwarenetwork
High
58
Jul 24, 26
Domainms365-device.com
intel-blogmalwarenetwork
High
58
Jul 24, 26

IOC Relationship Graph

IOC Relationship Graph7 total IOCs
IPDomain
Domain4IP3Actors1REPORTHackers Hijack Hotel Wi-FiAPT28
scroll to zoom · drag to pan · click IOC to open