Storm-1865 Strikes Again: Fake Booking.com Emails and ClickFix Scam Target Hospitality Sector

Beware of fake Booking.com emails! Cybercrime group Storm-1865 is storming the hospitality sector with clever ClickFix trickery. They lure victims into downloading malware by pretending to be guest review alerts. Microsoft warns: Don’t be fooled, or you may end up booking a one-way trip to Cybercrime City!

Hot Take:

Who knew a fake email could get you more than just spam? Thanks to Storm-1865, that innocuous-looking Booking.com message could lead you on an unexpected journey from comfy hotel rooms to the dark alleys of malware infections. If you’re in the hospitality sector, now’s a good time to keep an eye out for emails promising online promotion opportunities — unless you want to promote your way into a hacking scandal!

Key Points:

  • Storm-1865 targets the hospitality industry with fake Booking.com emails.
  • The attacks use a social engineering technique called ClickFix.
  • Victims are tricked into executing malicious commands on their computers.
  • The malware payloads can steal financial data and credentials.
  • Storm-1865’s tactics are evolving to bypass traditional security measures.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here