A phishing campaign in May targeted hotel accommodations partnered with Booking.com across Japan, according to InfoSecurity Magazine. The attackers sent emails designed to compromise staff credentials or trigger malware downloads at partner properties.
The malware itself was hosted on blockchain infrastructure rather than conventional servers. Using decentralized or blockchain-based hosting complicates standard takedown procedures, since there is no single host to contact or legal jurisdiction to leverage. This approach has become more common among threat actors seeking resilience against law enforcement and security firm takedown efforts.
Booking.com partner hotels are a logical target for phishing campaigns. Staff at smaller properties often lack formal security training, and compromise of a single employee account can yield access to booking systems, guest contact information, or payment data. The use of a recognizable brand name in a phishing email increases the likelihood that recipients will open attachments or click links.
The scope of the campaign remains unclear. InfoSecurity Magazine did not specify how many hotels were contacted, whether any fell victim, or what data or systems may have been accessed. No attribution to a particular threat group has been publicly announced.
Hotels and other hospitality operators dependent on third-party booking platforms face compounded risk. They inherit both their own security posture and any vulnerabilities in the platforms they use. Booking.com itself has recommended that partners verify incoming requests and implement multi-factor authentication on staff accounts. Staff training on phishing recognition remains one of the most reliable defenses, particularly at smaller properties where security budgets are thin.
The use of blockchain-based hosting for malware reflects a broader shift in attacker infrastructure. Traditional hosting providers face legal pressure and public scrutiny. Blockchain networks offer redundancy and opacity, though they do not provide immunity to detection or analysis once samples are obtained.