Phishing fraudsters have moved on from banking sites with an attack designed to hoodwink hotel customers, according to a team of security volunteers. Hotel chains including Hyatt, TraveLodge, Comfort Inn, Ramada, Days Inn, and Wyndham are being targeted in the reported scam. More than 71,000 travelers each month have been …
I do not know about the malware sites, but I do know for a fact that they do try to scam the hotel's themselves.
The way the scam usually works is that they send an email asking for rooms for four or five people for a ten day period, then asking for the total cost of this and whether the hotel accepts credit cards. As the hotel has no way of know if this is a scam or not, they have no choice but to reply in case it is a legitimate request. When the scammer receives the response, they then send back a message saying that due to some problems with transferring money, they are unable to get money to the travel agent. They would like to give the hotel a credit card number for the hotel to charge, (room and tax plus a small token for their help) and forward the rest on to their travel agent.
Might not be phishing
Could it not simply be a HOSTS style attack from existing malware/kits?
You can check out any time you like...
...but you can never leave.
Am I being thick? How are they scamming the hotel?
AC asked: Am I being thick? How are they scamming the hotel?
If the hotel was stupid enough to fall for this and actually charge the card and forward money on, the card would then most likely be reported as stolen. The credit card company would then refuse to pay the hotel. Therefore the hotel would be scammed out of the money they forwarded.
Sorry, I'm not buying it. I don't think any hotel anywhere would put a charge against a card number mailed to them and then forward funds to somewhere else.
Re: As if
I happen to agree with you, but I still get the messages from them anyway trying to get me to do it. It's gotten to the point where I have created a template for answering them. The only thing I have to change in it is the name of the person writing to me and the dates that the people are supposed to be staying at the hotel.