Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data
Source Reddit InfoSec News
Description
Russian threat actors have created approximately 4,300 fake travel websites designed to impersonate legitimate hotel booking platforms. These fraudulent sites aim to steal payment card data from unsuspecting hotel guests by capturing their payment information during the booking process. The campaign leverages phishing tactics and domain spoofing to deceive users into trusting these fake portals. There is no indication that these sites exploit software vulnerabilities; rather, they rely on social engineering and fraudulent web infrastructure. The threat poses a high risk to travelers and hospitality businesses, particularly in Europe where travel and tourism are significant economic sectors. Organizations should be vigilant about monitoring for fraudulent domains and educating customers about verifying legitimate booking sites. Mitigation involves enhanced domain monitoring, customer awareness campaigns, and deployment of anti-phishing technologies. Countries with large tourism industries and high volumes of international travelers, such as Spain, Italy, France, Germany, and the UK, are most likely to be targeted. Given the ease of exploitation and potential for significant financial theft, the severity of this threat is assessed as high.