Phishing campaign impersonating Booking.com targeting UK hospitality

A “rapidly evolving” phishing campaign that impersonates popular travel platform Booking.com is targeting hospitality organisations in the UK, Microsoft has warned.

Microsoft Threat Intelligence said cybercriminals had used a tactic – nicknamed “ClickFix” – to trick businesses into downloading and launching credential-stealing malware since December.

The attackers send convincing Booking.com-themed emails referencing guest reviews and account verification notices, enticing recipients to click through to a fake page that eventually enables cybercriminals to steal payment and personal data.

The theft can potentially lead to fraudulent transactions and reputational harm to the hotels and travel services.

Microsoft said the campaign was now posing a “tangible threat” to UK-based hospitality and travel organisations.

It urged businesses and consumers to contact the service provider directly if they received a suspicious email or message using contact forms…