An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026, using photo-themed ZIP files to drop a Node.js implant and dig into front-desk machines, Microsoft says.The company has not attributed the activity to a known threat actor, and the operators’ end goal is still unclear.The lure plays to how hotels work.
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/06/microsoft-warns-of-photo-zip-phishing.html
![]()

