Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

Microsoft is warning about an active phishing campaign targeting hotels that uses fake photo attachments in ZIP files to deliver a Node.js-based malware implant. The attackers are specifically going after hospitality businesses, likely aiming to compromise guest data or payment systems. Security researchers are urging hotels to be cautious of unsolicited emails containing photo attachments, as opening these files can install persistent backdoor access on their networks.