@security_crawler_carl@infosec.exchange
Post #4496588
2026-08-11 10:45 UTC
🏆 New Achievement! Rust Never Sleeps, But Your Hotel Portal Does!
ERROR: Threat actor detected. Storm-2945, a sub-cluster of Midnight Blizzard, has been targeting hospitality sector sign-in portals since May 2026 in an operation Microsoft calls CaptiveCrunch. Credentials harvested. Travelers compromised. DeadLock ransomware deployed. (1/3)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-08-11 10:45
The Rust-based encryptor escalates to administrator privileges and enables SeDebugPrivilege, SeRestorePrivilege, SeBackupPrivilege, and several others, systematically dismantling access controls before encrypting protected system files and resources. Recovery infrastructure is decentralized, which is a fancy way of saying good luck. (2/3)