Hotel Booking Scam Hits Guests With Double Attack
Threat actors are using ClickFix attacks to steal hotel credentials, then contacting customers with legitimate reservation details to steal banking information. The campaign has been active since at least April 2025 and involves multiple malware families.