Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
Storm-1865 Strikes Again: Fake Booking.com Emails and ClickFix Scam Target Hospitality Sector
Beware of fake Booking.com emails! Cybercrime group Storm-1865 is storming the hospitality sector with clever ClickFix trickery. They lure victims into downloading malware by pretending to be guest review alerts. Microsoft warns: Don’t be fooled, or you may end up booking a one-way trip to Cybercrime City!

Hot Take:
Who knew a fake email could get you more than just spam? Thanks to Storm-1865, that innocuous-looking Booking.com message could lead you on an unexpected journey from comfy hotel rooms to the dark alleys of malware infections. If you’re in the hospitality sector, now’s a good time to keep an eye out for emails promising online promotion opportunities — unless you want to promote your way into a hacking scandal!
Key Points:
- Storm-1865 targets the hospitality industry with fake Booking.com emails.
- The attacks use a social engineering technique called ClickFix.
- Victims are tricked into executing malicious commands on their computers.
- The malware payloads can steal financial data and credentials.
- Storm-1865’s tactics are evolving to bypass traditional security measures.