Hotels.com customers targeted by phishing scam

Unknown number of victims receive fraudulent emails

Hotels.com customers have been caught up in a phishing scam using fraudulent emails masquerading as legitimate messages regarding their bookings.

Part of Expedia group, Hotels.com allows customers to search for and book rooms at hotels across the country online or by phone.

The details of the scam are currently unclear, other than the fact it relies on duping the user into believing they have received a genuine email from Hotels.com or the hotel they booked with.

It is also not clear how the perpetrator or perpetrators got hold of the details of the victims, as this does not seem to be a random, scattergun phishing attack.

In a statement, Eva Heller, a spokesperson for the Hotels.com brand, said: "We have investigated this phishing incident thoroughly, and impacted customers are being or have already been notified and advised of any appropriate action they may need to take.

"Additionally, we are working closely with our hotel partners to educate on the sensitivity and importance of these type of fraudulent activities. Our security team continually works to address situations such as this and is always focused on making sure our sites are as secure as possible.

"We sincerely apologise for any inconvenience this incident may have caused."

However, Wieland Alge, VP and GM EMEA at Barracuda Networks said that this apparent breach shows the difficulties faced by companies balancing usability with security.

"The internet platforms put a lot of effort into the ease of use of their services," he said. "The quicker I can book my hotel the better my user experience is. Platforms with very diligent authentication and security information often appear heavyweight and not state-of-the-art. The downside of this is that it is also quite simple for villains to exploit the customer's wish for simplicity."

He added: "More than ever, businesses and consumers need to put significant effort into learning how to recognise the traits of a phishing attack.#

"As well as putting security systems in place, businesses, employees and consumers alike need to remain vigilant and question any unexpected email, with links or attachments that arrives in their inbox."

Featured Resources

BCDR buyer's guide for MSPs

How to choose a business continuity and disaster recovery solution

Download now

The definitive guide to IT security

Protecting your MSP and your customers

Download now

Cost of a data breach report 2020

Find out what factors help mitigate breach costs

Download now

The complete guide to changing your phone system provider

Optimise your phone system for better business results

Download now

Recommended

eBay, Apple, Microsoft, Facebook, and Google were phishers’ top targets in 2020
phishing

eBay, Apple, Microsoft, Facebook, and Google were phishers’ top targets in 2020

20 Apr 2021
Google’s about to push everyone into two-factor authentication
Security

Google’s about to push everyone into two-factor authentication

6 May 2021
Defense Dept. expands vulnerability disclosure program to all publicly accessible defense systems
ethical hacking

Defense Dept. expands vulnerability disclosure program to all publicly accessible defense systems

5 May 2021
Security researchers take control of a Tesla via drone
ethical hacking

Security researchers take control of a Tesla via drone

5 May 2021

Most Popular

KPMG offers staff 'four-day fortnight' in hybrid work plans
flexible working

KPMG offers staff 'four-day fortnight' in hybrid work plans

6 May 2021
Dell patches vulnerability affecting hundreds of computer models worldwide
cyber security

Dell patches vulnerability affecting hundreds of computer models worldwide

5 May 2021
16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

29 Apr 2021