Safe Travels? Check Point Research puts a spotlight on a growing underground market selling flight points, hotel rewards and stolen credential of airline accounts


Highlights:


  • Check Point Research (CPR) reveals a growing industry selling credentials to stolen hotel and airline accounts.

  • End goal is to get access to accounts with reward points and sell it.

  • CPR provides examples including dedicated brute forcing tool used to steal accounts, stolen credentials on sale and “travel agents” selling discounted flights retrieved using stolen airline / hotel accounts.

  • Background


    With airline prices skyrocketing these days, amidst the global inflation, people are always seeking last minute sales, special offers and will usually be tempted to follow any lucrative offer that will decrease the heavy prices we all need to pay towards our next vacation.It seems that hackers and cybercriminals leverage this, as always, in their quest to maximize profits and leverage a need that requires a resolution.In this report, Check Point Research turns a spotlight into what seems like a growing phenomenon, in which cybercriminals are offering a variety of deals for those who seek to cut back on their expenses, while trying to get to their vacation’s destination.


    Leverage your reward points, even if they are not your own!


    Our researchers present examples to what seems to be a growing market on alternative pathways in which threat actors and cybercriminals offer their “goods”, using stolen credentials to airline and hotel personal accounts, or accumulated rewards that can be used to buy tickets or hotel nights.One method cybercriminals use is offering stolen credentials of hotel and airline accounts that have accumulated reward or flight points. These stolen credentials are offered for free or for sale on hacking Darknet forums. Examples of such accounts include hotels like Marriott, Delta, and AA. Cybercriminals also use a ..

    Support the originator by clicking the read the rest link below.