Fake rental sites use live chat to lure travellers into giving up details
PHISHINGFortraredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Fortra's FIRE team detected and removed phishing sites impersonating popular vacation rental platforms. The clones reuse legitimate branding, copied listings, reservation details and host reviews, and use urgency tactics and live chat to lower victim suspicion before harvesting credentials, personal data and payment card numbers. No CVEs are involved. Defenders should brief travellers to book only through official apps or verified domains and to treat unsolicited chat prompts on rental sites as suspicious. Monitoring for lookalike domains and copied listings is also worthwhile.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Book holiday rentals only through the official website or app, not through links or chat prompts received unexpectedly.
- Do not enter passwords or card details on a rental site reached through an unfamiliar link.
- Be wary of urgent messages pressing you to pay or act quickly.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security
Who and what is in it
Companies