[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuNBTXVd7u4fmru04D9cWG5rkPwXxQy_VdauCEEFTatQ":3},{"article":4,"iocs":36,"watch_terms":41,"solutions":42,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"7c50eb3e-cfae-4fe9-b7a8-c14861f9dfa8","Rental phishing sites use live chat to win over hesitant travelers","rental-phishing-sites-use-live-chat-to-win-over-hesitant-travelers-1ee772","Holiday travelers looking for a place to stay are landing on copies of popular rental platforms, complete with host names, ratings and reviews, that ask for their passwords, personal details and credit card numbers. The sites, spotted and taken down by Fortra’s Intelligence and Research Experts (FIRE) team, rely on familiar branding, copied property listings and reservation details, along with urgent messages meant to rush visitors into acting. A phishing page imitating a rental marketplace … More → The post Rental phishing sites use live chat to win over hesitant travelers appeared first on Help Net Security.","Cybercriminals are creating sophisticated phishing sites that mimic popular rental platforms, complete with copied listings, host details, and reviews. These sites leverage the urgency of travel bookings, using prompts about unconfirmed reservations or payment issues to rush users into providing sensitive information like passwords, personal details, and credit card numbers. Fortra's FIRE team has observed these sites using live chat features to reassure victims, making the fraudulent payment forms appear as routine security checks.","Phishing sites impersonating rental platforms use live chat to trick travelers into sharing personal data.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F06\u002Fholiday-rental-platform-phishing-travelers\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2024\u002F07\u002F07135238\u002Ftravel_scams.webp","2026-11-06T05:00:41+00:00","2026-11-06T06:00:15.823937+00:00",7,[17,20],{"name":18,"type":19},"Fortra","vendor",{"name":21,"type":22},"FIRE","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":23,"icon":25,"name":26,"slug":27},null,"Threat Intelligence","threat-intelligence",[29,34],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},[37],{"type":38,"value":39,"context":40},"domain","rooms-home93914[.]space","Impersonated a global experiences and lodging platform with a lookalike address.",[18,21],{"controls":43,"vendors":126},[44,71,100],{"slug":45,"name":46,"problem":47,"products":48},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",[49,55,63],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":50,"product_name":51,"url":53,"description":54},"dnsfilter","DNSFilter","\u002Fvendor-logos\u002Fdnsfilter.png","https:\u002F\u002Fwww.dnsfilter.com\u002F","DNS filtering for offices and roaming devices.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-internet-access","Zscaler Internet Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-internet-access","Cloud secure web gateway with DNS security, inspection and data protection.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","umbrella","Cisco Umbrella","https:\u002F\u002Fumbrella.cisco.com\u002F","DNS-layer security and secure web gateway delivered from the cloud.",{"slug":72,"name":73,"problem":74,"products":75},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","harmony-email","Harmony Email & Collaboration","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F","Email and collaboration security for Microsoft 365 and Google Workspace.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.",{"slug":101,"name":102,"problem":103,"products":104},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[105,112,118],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":106,"product_name":109,"url":110,"description":111},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":113,"product_name":114,"url":116,"description":117},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[],{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":139},"phishing-sites-mimic-rental-platforms-with-live-chat-to-steal-traveler-data","Phishing Sites Mimic Rental Platforms with Live Chat to Steal Traveler Data","Cybercriminals are exploiting traveler urgency by creating convincing replica rental platforms that include copied listings, reviews, and even live chat agents to build false trust. The root cause is a lack of user awareness about how to verify legitimate websites and payment portals, combined with the psychological pressure of time-sensitive travel bookings. These attacks succeed because victims cannot distinguish fraudulent 'security checks' from genuine platform processes. The theft of passwords, personal details, and credit card numbers can lead to financial loss, identity theft, and long-term credential compromise.",[132,133,134,135,136,137,138],"CIS Control 14: Security Awareness and Skills Training","MITRE ATT&CK T1566: Phishing","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","GDPR Article 32","ISO\u002FIEC 27001:2022 Clause 7.2: Competence","PCI DSS Requirement 6","NIS2 Article 21(2)(b)",{"GDPR Article 32":140,"NIS2 Article 21(2)(b)":141,"PCI DSS Requirement 6":142,"MITRE ATT&CK T1566: Phishing":143,"ISO\u002FIEC 27001:2022 Clause 7.2: Competence":144,"CIS Control 14: Security Awareness and Skills Training":145,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":146},"The theft of personal data including passwords, personal details, and credit card numbers constitutes a data breach under GDPR, requiring both preventive technical measures and breach notification procedures.","NIS2 requires entities to implement measures addressing incident handling and human risk factors; the social engineering vector exploited here falls within the scope of cyber hygiene and training obligations under this article.","The fraudulent payment forms used to harvest credit card data highlight the need for merchants and platforms to ensure payment processes are verified and protected against spoofing, as required by PCI DSS.","This attack is a textbook phishing campaign using spoofed websites and live chat lures to harvest credentials and payment data, making T1566 the precise technique classification for detection and defensive planning.","Organizations must ensure staff and users are competent to recognize social engineering threats; training on phishing site indicators and verification practices is directly mandated by this clause.","Victims fell for social engineering tactics that targeted their lack of awareness; structured training on phishing recognition and verification habits would directly reduce susceptibility to these fake rental sites.","Stolen credentials harvested through phishing can be used for account takeover; enforcing multi-factor authentication on rental platforms would limit the damage even when passwords are successfully phished."]