{
  "name": "Booking.com Phishers May Leave You With Reservations",
  "slug": "bookingcom-phishers-may-leave-you-with-reservations",
  "description": "A recent spear-phishing campaign targeted a California hotel after its Booking.com credentials were stolen. The scam involved sending targeted messages within the Booking mobile app, claiming additional information was required for anti-fraud purposes. Booking.com confirmed a security incident affecting one of its partners, allowing unauthorized access to customer booking information. The company now requires two-factor authentication for partners, but it's unclear if this is enforced for all accounts. Cybercriminals are increasingly targeting Booking.com hospitality partners, with attacks rising 900% in 2024. The article also explores various cybercrime services aimed at phishers targeting hotels that use Booking.com, including the sale of compromised accounts and tools for automated login attempts.",
  "published": "2024-11-02T22:40:42+00:00",
  "created_at": "2024-11-02T22:40:42+00:00",
  "modified_at": "2024-11-04T10:31:49+00:00",
  "created_at_opencti": "2024-11-02T22:40:42+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-11-02",
    "2fa",
    "booking.com",
    "credential-theft",
    "cybercrime",
    "hospitality",
    "phishing",
    "travel"
  ],
  "related_entities": {
    "attack_patterns": [
      {
        "id": "6babd5aa-5112-4f14-a660-60d756a65d6d",
        "name": "T1586"
      },
      {
        "id": "7e3e3784-9547-42ca-b888-482972d14be3",
        "name": "T1528"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      },
      {
        "id": "9f11a241-9abc-4c57-95dd-33955ab08826",
        "name": "T1078"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "United States of America"
      },
      {
        "id": "",
        "name": "Hospitality"
      },
      {
        "id": "",
        "name": "Travel"
      }
    ]
  },
  "external_refs": [
    "https://krebsonsecurity.com/2024/11/booking-com-phishers-may-leave-you-with-reservations/",
    "https://otx.alienvault.com/pulse/6726b87a6f6cb6d37a28e9c0"
  ]
}