Microsoft and security researchers say compromised hospitality networks are helping attackers target corporate travelers through deceptive sign-in pages.