Bogus hotel websites set up to push a variety of scams
Posted on 11 December 2012.
As the end-of-the-year holidays slowly approach, cyber crooks are ramping up their various scammy campaigns. Among these is a relatively new but rather complex combination of scams dubbed "hotel fraud", which targets a variety of Internet users.

The crooks start with creating bogus websites for popular hotels such as the Sheraton Skyline Heathrow near London. The hotel's official site is located on http://www.sheratonskyline.com/, while a fake site for the same hotel might be parked on a very similar domain such as http://sheraton-skylinehotel.com/.

"Hotel fraud is usually backed up by job scams, tempting innocent users (mostly young immigrants) with the exciting offer of working abroad. Through the career section, fake hotels actually recruit 'mules' for money laundering," Bitdefender explains.

"Hotel fraud, like any other fraud, may also come combined with social engineering tricks. For instance, an 'authentic' job hunter may see who’s looking for a job or a holiday abroad, creating profiles from personal data people spread on recruitment and social media websites, then convince them by e-mail or instant messaging of his good intentions. After gaining their trust, scammers send the bait out in the wild and let users enter the bogus hotel website."

For the victims, this may end up with having their identities and money stolen - scammers may ask victims for an advance fee for the room offer or the career opportunity.

The bogus site does not have to resemble the legitimate one because these scammers are not phishers. Also, you won't land on such a site via a link you received in an email or seen on a friend's Facebook or Twitter status - this scam is meant to fly under the radar as long as possible.

Bitdefender advises users to check whether they are on a legitimate page via the WHOIS tool. Domains hosting fake hotel sites will have a fairly recent registering date, will often sport a private email address as the owner's contact address, and will likely be registered only for a year.

Alternatively, they can insert the name of the hotel in a search engine, add the words "scam" and "fraud", and see whether there are any ongoing scams tied to its name.






Spotlight

Behavioral analysis and information security

Posted on 22 September 2014.  |  In this interview, Kevin Watkins, Chief Architect at Appthority, talks about the benefits of using behavioral analysis in information security and how behavioral analysis can influence the evolution of security technologies.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Sep 23rd
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //