Recent incidents reveal that phishers are increasingly targeting Booking.com users by accessing hotel partners’ systems. This spear-phishing scheme often misleads customers into providing personal information under the guise of confirming their reservations. Cybercriminals use stolen credentials to impersonate hotel staff, creating fake messages that request additional information or payments. Booking.com has enforced two-factor authentication (2FA) for its partners to counteract these attacks, but threats persist. The company encourages users to remain vigilant and avoid making payments outside the platform.
For details, visit Krebs on Security.
News Source:Krebs on Security，This article does not represent our position.
