Microsoft exposes phishing scam targeting Booking.com hosts

Microsoft has disclosed a phishing scam targeting hotel and accommodation owners with listings on Booking.com, aiming to alert the tourism sector and consumers.

According to Microsoft, the scam involves fraudulent emails that appear to be from Booking.com, suggesting scenarios such as a guest leaving a bad review. These emails urge recipients to take action, leading them to verify their login through PDF documents or links, falsely building confidence through a CAPTCHA process. However, completion of the process results in the cybercriminals gaining access to login credentials and financial information.

This phishing scheme is part of a pattern identified by Microsoft since early 2023, with scammers shifting focus towards hotel and accommodation owners this time. Historically, similar scams have duped guests into sharing financial details due to fake emails claiming imminent booking cancellations. The Australian Competition and Consumer Commission (ACCC) has reported…