Hackers are abusing hotel booking notifications to steal credentials in a new phishing campaign

Suitcase next to a bed in a hotel.

• Phishing campaign targets hotel staff using fake Expedia and Cloudbeds login pages
• Attackers show deep knowledge of hospitality workflows to boost credibility
• Hospitality businesses are prime targets due to constant handling of sensitive guest data

Hotels, and other similar businesses in the hospitality industry, are being targeted by an advanced, highly convincing, phishing campaign.