Phishing sites mimic rental platforms to steal credentials
Original title: Rental phishing sites use live chat to win over hesitant travelers
Fortra FIRE team reports phishing pages using live chat and urgency to collect traveler data.
Cybercriminals operate phishing sites copying popular rental platforms with familiar branding, host names, ratings and reviews. They use urgent messages about unconfirmed reservations or payments to pressure travelers into submitting passwords, personal details and credit card numbers. The sites were discovered and taken down by Fortra's FIRE team.
- Sites imitate global experiences and lodging platforms with lookalike addresses.
- Live chat responds to concerns and presents card requests as security checks.
- Attackers copy listings to blend in with legitimate properties.
- Reusing passwords across services puts other accounts at risk.
Impact: passwords, personal details, and credit card numbers
- 1.Verify official website addresses before entering credentials.
- 2.Do not click unsolicited links.
- 3.Avoid entering information after following links even if logos look familiar.
- Vendors
- Fortra
- Products
- rental platforms
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | rooms-home93914.space | ing platform, using a lookalike address (confirm-[redacted].rooms-home93914[.]space) and imagery matching the brand. The sign-up prompt asked |
From the original article
3 min read at helpnetsecurity.com
Holiday travelers looking for a place to stay are landing on copies of popular rental platforms, complete with host names, ratings and reviews, that ask for their passwords, personal details and credit card numbers.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.