ClickFix Phishing Campaign Targets Booking.com and Hotels

A phishing campaign named ClickFix has been targeting hotels and their customers, exploiting compromised accounts on Booking.com. Cybercriminals have used malware to steal customer data and launch phishing attacks, convincing victims to enter sensitive information on spoofed websites. The campaign has been active since at least April 2025 and has affected numerous hotels globally, including those in Vietnam.