- Published
- Source
- Bitdefender
- Filed under
- Phishing & scams
European regulators are investigating whether Booking.com is doing enough to protect travelers from fraudsters who exploit hotel reservations, impersonate property owners, and trick customers into making fraudulent payments. Booking.com is facing a European Union investigation over concerns that scammers are exploiting the popular travel platform to steal money and personal information from unsuspecting holidaymakers. The European Commission announced the investigation on Oct. 21, saying it wa…
Spotted a scam?
- Forward suspicious emails to report@phishing.gov.uk – the NCSC uses the reports to take scam sites down.
- Forward scam texts to 7726, free on most UK networks.
- Never share a one-time code, and check any request for money by calling a number you already trust.
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
Impersonation
StealthWhat a defender checks
- Confirm any change of payment details on a number you already hold – never the one in the message.
- Make the help desk verify identity before resetting passwords or MFA.
- Brief finance and help-desk staff on the current pretexts.
Build the skillBlue Team Analyst · Email & Phishing Investigation
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
Blue Team Analyst · Email & Phishing Investigation
Someone will report this email. Know exactly what to do next.
Analyse a reported phishing email properly: headers, message trace and quarantine, what SPF, DKIM and DMARC failures tell you, and the indicators that make it business email compromise.
- Header forensics and message trace
- SPF, DKIM and DMARC failures explained
- Spotting business email compromise
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
