Since early March 2023, a phishing (malicious email) campaign has been targeting staff from the hospitality industry. The cyber criminals use malicious emails that contain subjects related to booking reservations:  “help,” “requesting for assistance,” “route map,” “this is me from booking.com,” and “booking reservation.” Some of the emails may include “Re:” in the subject line, to trick your staff into thinking that they are reading a reply to an email thread. 

The phishing campaign will then prompt employees to open a link that leads to malware.

In the example below, a criminal tries to trick a hotel employee into clicking on a link that does not lead to a route diagram but to malware:

In case this happens to you, please inform your manager immediately.