Threat Intelligence Brief
Curated summary with source attribution
Source: homeexchange.com
Threat Risk: Medium
Victim: Travelers and hotel guests
Incident: A phishing campaign using leaked travel data to steal payment information via WhatsApp.
Impact: Financial loss and compromise of payment card details for thousands of travelers.
Attacker: Unidentified threat actors
Analysis: The campaign leverages a previous Booking.com data breach and compromised hotel staff accounts to create highly convincing phishing messages. By referencing specific, accurate stay details, attackers bypass typical skepticism and direct victims to spoofed payment pages. The persistence of the campaign indicates a sustained effort to monetize stolen travel data.
Recommendations: Verify hotel contact information through official channels before responding to WhatsApp messages.; Carefully inspect payment URLs for slight deviations from official hotel or Booking.com domains.; Avoid entering payment information through links provided in messaging apps.
Source: HomeExchange
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source