Cyber Security Firm Unveils Booking.com Account Details Scam Targeting Users
Data breaches have reached Booking.com users as cybercriminals exploit stolen account details to dupe users. SecureWorks, a cybersecurity company, revealed that hackers are selling Booking.com credentials on the dark web for up to $2,000 after leveraging hotel stays to steal the data.
While the security of Booking.com’s main website remains uncompromised, criminals are infiltrating hotel administration portals connected to the service. Secureworks recently published a report detailing an October 2023 attack involving the deployment of the Vidar infostealer, providing threat actors access to the Booking.com management portal. The breach enabled them to interact with guests and conduct fraudulent activities.
The attack involved phishing emails sent to hotel staff, posing as a former guest who had misplaced identification documents. Upon clicking a link in a second email, recipients unknowingly downloaded the Vidar infostealer. Cybercriminals then used the stolen credentials to launch a larger fraud campaign targeting Booking.com customers and properties.
Several customers have reported falling victim to malicious URLs disguised as official Booking.com messages, resulting in the theft of their payment details. The use of Vidar in this targeted campaign is unusual, as it typically harvests credentials from web browsers. However, its flexibility as a malware-as-a-service operation allows any threat actor to utilize it for their purposes.
As a response, cybersecurity experts advise hospitality sector organizations to raise employees’ awareness of this campaign and implement multi-factor authentication on Booking.com accounts. Customers are also urged to exercise caution concerning emails or app messages requesting payment details, as they may be part of fraudulent schemes.
To steer clear of falling victim to such online scams, implementing preventive measures against unauthorized access and fraudulent activities is crucial for both businesses and individuals.