Beware: Fake Booking.com Emails Delivering Malware – How to Spot The ClickFix Scam!
Cofense Intelligence uncovers the rise of ClickFix scams impersonating Booking.com to deliver malware. These email scams trick users into running malicious scripts disguised as CAPTCHAs. Watch out for fake prompts that ask you to run commands on your computer. Stay alert to protect against XWorm RATs and data-stealing threats.
Hot Take:
Looks like Booking.com is now offering vacations to malware paradise! Just when you thought your worst travel nightmare was losing your luggage, here comes an email scam that can take you on a digital detour straight to Hacker’s Haven. So, pack your bags, or maybe just your antivirus software, because these scammers are checking you in for a stay you definitely didn’t book!
Key Points:
- ClickFix email scams impersonate Booking.com to deploy malware.
- The campaign has rapidly increased, with March 2025 seeing a 47% surge.
- Fake CAPTCHAs are used to trick users into running harmful scripts.
- Malware includes XWorm RAT and information stealers like Pure Logs Stealer.
- Scams solely target Windows users, using deceptive legitimacy tactics.
Already a member? Log in here