YCS Security Team

YCS Security Team Yanolja Cloud Solution

Hi community, Phishing is a type of cyberattack where criminals impersonate a trusted source — a hotel, a booking platform, or a payment service — to trick people into clicking fake links or sharing sensitive information such as card details or login credentials. An active, coordinated phishing campaign is currently targeting hotels, guests, and booking systems across the global hospitality industry. Attackers are sending WhatsApp messages and emails to guests that appear to come from their hotel. These messages reference real booking details — name, hotel, stay dates — and ask guests to verify their payment through a fake link. The details look real because they are: attackers have accessed hotel systems to obtain them. Correct this to This is an industry-wide attack. Booking.com and several other major platforms have publicly confirmed they are affected by the same campaign. YCS customers are among those impacted.