""" Users are then prompted to download malicious files, after which the hijackers infect the user's device with malware that collects browser cookies, passwords, documents and more, Microsoft said. The hackers are able to capture keystrokes, screenshots, audio, and video, monitor the clipboard, and operate the device remotely.

In some instances, users attempting to access a compromised network may be redirected to fake login screens, at which point, the hijackers will be able to access the user's Microsoft 365 account, giving them further access to the person's email and OneDrive."""

Yeah, don't download random files or giver your credentials to random pages, on both public and private WiFi. As long as you don't do stupid things everyone uses https now so you'll be fine.