Holidaymakers defrauded via Booking.com’s official messaging system

Booking.com customers around the world have been complaining about scams through the company’s official email and messaging systems. Holidaymakers received phishing emails through the booking platform. Many users did not recognize the emails as such and transferred money to criminal organizations.

All affected customers had already booked a hotel through the website or app. After some time, they received an email from Booking’s official email address claiming that their reservation would be canceled if they did not provide their bank details via the link in the email. Some people were asked to make another payment for verification.

“Reservation was not hacked”

Notifications of such phishing emails also appeared on the platform’s official app. Originally the Dutch company denies any hacker attack on its systems and says there is a problem with each hotel’s email system.

After its analysis, cybersecurity company Heimdal concludes that this outcome seems likely. Apparently criminals had infiltrated the hotel systems and were able to send fake emails through their systems. These then land in the message area of ​​the booking app. It is common for hotels to communicate with customers through Booking systems.

In any case, there are already reports online from affected customers booking in Great Britain, France and Singapore. Dozens of people in the latter country were defrauded out of a total of US$41,000, Singapore police reported two weeks ago.

‘Serious matter’

Booking.com wrote in a statement to the British newspaper The Observer that it took the issue seriously. “While Booking’s systems and infrastructure are not affected, we are very aware of the impact such frauds can have on our business, our hotel partners and our customers.”

It’s unclear exactly what Booking will do to prevent phishing through its systems. However, it is said that affected customers will be contacted. The company also warns its customers to be especially careful about possible fake messages.

Source: NOS

follow:
\