Kaspersky experts have uncovered a series of phishing scam campaigns targeting major UK&I travel firms RyanAir, TUI, Booking.com, and AirBnB. Active since the start of the year, the spoofed websites are tricking UK consumers into thinking they are booking a ‘holiday bargain’ by accurately mimicking booking pages, promotional deals, and login portals.
January is the busiest month of the year for booking holidays, with new Kaspersky research finding that 70% of UK consumers are hoping to jet off to sunnier climes this year. The research also reveals that over two thirds of those surveyed will use one of the major providers such as TUI or Booking.com to book their getaway. However, with more than £15.3 million reportedly stolen from Britons last financial year in travel-related scams, according to Action Fraud, cybercriminals are already exploiting the massive seasonal holiday booking surge.
The most popular way of identifying holiday deals is through the use of search engines, with Kaspersky research revealing this is the preferred approach for 88% of consumers, compared to 40% who primarily use social media. This is reflected in the scams identified by Kaspersky experts, all of which accurately mimic holiday booking websites including RyanAir, TUI, Booking.com, and AirBnB.
Consumers are being encouraged to click on adverts for holiday packages or enticing special offers, and although URLs have been changed, the sites look and feel legitimate which leads to money willingly being handed over for non-existent holidays. Victims will often not realise they have been defrauded until they try to check in for flights, only to be told that their booking does not exist.
Kaspersky uncovered spoof fraudulent websites for major providers Ryanair, Booking.com, and TUI (above)
“The scam travel websites we have identified are both perfectly timed, and well executed,” said David Emm, Principal Security Researcher, Kaspersky. “Cyber-scammers know January is a popular time for people to book holidays and to lure people in, all they need to do is mimic the most popular travel sites and put a timed deadline on a deal. When presented with an offer that looks too good to be true, some consumers are failing to consider the clear warning signs and being scammed.”
The gloomy weather and dark evenings have many people looking forward to their next holiday abroad, a fact scammers are taking advantage of, with scams ranging from fabricated log-in portals to counterfeit checkout pages.
Emm continues, “While looking to banish the January blues, bear in mind that appearances can be deceiving. It is critical to stay vigilant when booking through websites, apps, email ads or via social media; as what may seem to be a legitimate deal may not be. Our research shows that over half of consumers have booked a holiday after finding a discount online, with a further 31% stating that whilst they hadn’t booked a holiday, they would if they saw a good deal. Cybercriminals exploit our desires and as such we must make sure to check any offers or deals before clicking. If you aren't sure if something is real, check the travel company’s web site by typing their URL directly into your browser, rather than clicking a link in an ad. If it's real it will show up and then you can book from there.”
