Back Digg

Russian Hackers Create 4300 Fake Travel Sites to Steal Hotel Guests' Payment Data

Digg • January 25, 2026

In 2025, Russian hackers launched a phishing campaign targeting hotel guests by creating over 4,300 fake travel websites to steal payment data. The campaign, which began in February, uses sophisticated phishing kits to mimic popular booking platforms like Booking.com and Airbnb. Victims receive phishing emails urging them to confirm bookings, leading to fake sites that collect card details. The campaign's automation and use of phishing-as-a-service kits highlight the increasing ease and scale of phishing attacks.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Russian Hackers Launch Phishing Campaign with 4,300 Fake Travel Sites In 2025, Russian hackers initiated a phishing campaign that involved creating over 4,300 fake travel websites to steal payment data from hotel guests. The campaign, which began in February, utilized sophisticated phishing kits to imitate popular booking platforms, tricking victims into providing their card details through phishing emails. This incident highlights the growing trend of phishing-as-a-service in cybercrime. 2 sources 27

Extracted Entities

Russian Hackers Create 4300 Fake Travel Sites to Steal Hotel Guests' Payment Data

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Tools (2)