1 in 21 New Vacation Websites Is Malicious

• There has been a 55% increase in holiday-themed domain registrations year-over-year, according to new research from Check Point Research.
• The hospitality and travel industry is experiencing an average of 1.834 cyberattacks per week per organization, a 48% increase over last year.
• Cybercriminals are impersonating trusted platforms like Airbnb and Booking.com to steal payment details and distribute malware.

As travelers prepare for their summer getaways, cybercriminals are launching targeted attacks by exploiting seasonal trends in bookings and users' digital habits.

According to new research from Check Point Research (CPR), May 2025 saw a 55% increase in newly registered holiday-related web addresses, with 1 in 21 being classified as malicious or suspicious.

See more articles from iGuRu.gr when you search for news on Google.

iGuRu.gr preferred source

From phishing websites and emails that mimic popular platforms like Airbnb and Booking.com, to malware-infused scams targeting accommodation owners, attackers are exploiting users' trust to infect devices, steal personal data and payment details.

Increased cyberthreat activity was also recorded in the hospitality industry. The number of weekly cyberattacks per organization reached an average of 1.834, marking a 48% increase compared to last year and 78% over two years.

Check Point Research (CPR) research revealed specific and dangerous methods used by cybercriminals:

• A fake Airbnb domain that mimics the payment page to steal credit card information.
• A “ClickFix” attack via Booking.com, which uses a fake CAPTCHA to install a Remote Access Trojan (RAT) on accommodation owners’ devices.
• Fakes emails who pretend to Booking .on leading to phishing redirects via domains with a trustworthy appearance. There are indications of the use of genetic artificial intelligence (Generative AI), with a variety of content and subject lines, enhancing social engineering and bypassing detection systems.

“Cybercriminals know that during peak travel season, people relax their vigilance,” said Omer Dembinsky, Group Manager at Check Point Research.
“They design their scams to look completely legitimate, with logos and fake login screens, making it extremely easy to fall for their trap.
"These findings are a wake-up call for both consumers and the travel industry to raise awareness around cybersecurity."

guest

Guest Post: I saw openly and entered!