Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
In this article Microsoft Threat Intelligence has identified an active multi-stage intrusion campaign targeting organizations in the hospitality and hotel industry since April 2026. We’ve observed this activity through aggregated…