Security News Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant TheHackerNews Daniel Bender 26 Jun 2026 Share Microsoft says hotel phishing emails are using Calendly links and photo ZIP files to drop the TonRAT Node.js implant on front-desk systems.