InfoSecBulletin Cybersecurity for mankind
Booking.com, a major online travel agency, reported that customers have been targeted by hackers. While the agency’s systems are secure, online criminals have scammed many customers by stealing login credentials from the agency’s partner hotels. These criminals then pose as hotel staff to deceive customers.
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed
ALERT
Thousands of IP addresses compromised nationwide: CIRT warn
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks
Critical RCE Flaw Patched in Roundcube Webmail
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
What have the online attacks on Booking.com been like?
Fraudsters deceive hotels by pretending to be recent guests who left behind valuable items. They do this by calling the front desk and then sending an email with a link to a file on Google Drive.
The file was expected to be a picture of the item. But it turned out to be a malicious file called Vidar Infostealer. When the customer service representative opened it, it automatically stole login information from the hotel system and sent it to the fraudsters.
Hackers steal login information from Booking.com and use it to deceive hotel guests. They pretend to be hotels and ask guests to pay fake fees. Instead of using the official website, they send guests to a fake website or ask for credit card details over the phone. This scam is successful because the messages appear to come from legitimate hotel accounts on Booking.com.
Booking.com login credentials were found for sale on the Dark Web at a price of around $2,000. This suggests that these login details are highly effective. Booking.com has acknowledged the cyber-attacks on its partner hotels and is taking measures to stop them.
