Breach, Threat Management, Data Security, Malware, Phishing

Cybercriminals phish Booking.com customers after possibly breaching partner hotels

Share

Cybercriminals recently launched a phishing campaign targeting Booking.com customers whose information was illegally obtained, possibly by breaching certain partner hotels, according to multiple reports.

According to a June 3 report from The Sun, users have received WhatsApp and text messages warning them to change their passwords following a supposed security breach. By clicking on the accompanying malicious link, victims are unknowingly giving the adversaries access to their bookings.

Users are then reportedly sent an additional message demanding that they send an advance payment for their booked vacations to a bank account belonging to the cybercriminals. These messages look like the real deal because they include stolen personal information such as names, addresses, phone numbers, dates, booking prices, and reference numbers.

Booking.com reportedly told the Sun that the information was likely obtained by breaching certain hotels that it works with via a portal website separate from the travel company's main systems.

“In this case, there has been no compromise on Booking.com systems," a Booking.com spokesperson told the Independent. "A small number of properties have been targeted by phishing emails sent by cybercriminals and by clicking on those emails, the properties compromised their accounts. All potentially impacted guests have been notified and because we value our customers at Booking.com, we are supporting impacted guests to compensate for any losses incurred, and reclaim these from the property."

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.