Storm-1865 used ClickFix and Booking.com lures against hotels
Fake CAPTCHA pages pushed mshta commands that installed stealers and RATs; Booking.com says its own systems were not breached.
36
Product
Booking.com
- Mentions · 7d1
- Mentions · 30d3
- All mentions3
- First seenOct 21, 2026
- Last mentioned4d ago
Timeline
3 articles · newest firstEU opens DSA probe into Booking.com over scam and phishing risks
Formal proceedings could lead to a fine of up to 6% of Booking.com's global annual turnover if the firm is found non-compliant.
52
European Commission opens DSA fraud probe into Booking.com
Officials cite Booking.com’s June 2024 report of a 500–900 percent rise in travel scams and more than 1,000 Dutch fraud notices.
50
Appears with
- European Commissionorganization · 2
- US Federal Trade Commissionorganization · 1
- Booking.comvictim · 1
- XWormmalware · 1
- NetSupport RATmalware · 1
- Cybleorganization · 1
- AsyncRATmalware · 1
- VenomRATmalware · 1
- Danabotmalware · 1
- Vidarmalware · 1
- Microsoftorganization · 1
- Lumma Stealermalware · 1
- Storm-1865threat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.