InfoSecBulletin Cybersecurity for mankind
Booking.com, a major online travel agency, reported that customers have been targeted by hackers. While the agency’s systems are secure, online criminals have scammed many customers by stealing login credentials from the agency’s partner hotels. These criminals then pose as hotel staff to deceive customers.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
What have the online attacks on Booking.com been like?
Fraudsters deceive hotels by pretending to be recent guests who left behind valuable items. They do this by calling the front desk and then sending an email with a link to a file on Google Drive.
The file was expected to be a picture of the item. But it turned out to be a malicious file called Vidar Infostealer. When the customer service representative opened it, it automatically stole login information from the hotel system and sent it to the fraudsters.
Hackers steal login information from Booking.com and use it to deceive hotel guests. They pretend to be hotels and ask guests to pay fake fees. Instead of using the official website, they send guests to a fake website or ask for credit card details over the phone. This scam is successful because the messages appear to come from legitimate hotel accounts on Booking.com.
Booking.com login credentials were found for sale on the Dark Web at a price of around $2,000. This suggests that these login details are highly effective. Booking.com has acknowledged the cyber-attacks on its partner hotels and is taking measures to stop them.
