New hotel reservation scam spreads through major OTAs
🚨 Nov 14, 2025 - Travelers booking via Booking.com and Expedia are targeted by a phishing scam using compromised hotel accounts. Scammers send fake payment-verification requests, urging guests to verify payment to avoid cancellation. Attackers use a ClickFix attack to compromise hotel systems, deploy malware like PureRAT for remote access and credential theft. To stay safe, guests should verify payment requests directly with hotels using official contacts. Avoid trusting email or message requests for payment confirmation.
Share