Jun 262026 Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant Microsoft says hotel phishing emails are using Calendly links and photo ZIP files to drop the TonRAT Node.js implant on front-desk systems.