Fake Photo Files Are Infecting Hotels with Spyware: Travel Safety Tips

Microsoft Threat Intelligence has identified an active cyber attack campaign targeting hospitality organizations in Europe and Asia. Hackers are sending hotel staff files that appear to be photo ZIP archives, but they actually contain malicious software. When hotel employees open these fake image files, the attackers install a persistent spyware implant on the hotel's computer systems. This type of attack is designed to evade detection and maintain long-term access. This primarily affects hotels and other hospitality businesses in Europe and Asia.

For families, the concern is that when hotels get compromised, your personal information could be at risk. This includes your credit card details, passport information, home address, and travel itinerary that you provide when checking in or making reservations. If the hotel's systems are infected, attackers may be able to steal this data.

Here is what you should do to protect yourself when traveling:

1. Use credit cards instead of debit cards when booking hotels. Credit cards offer better fraud protection if your information is stolen.
2. Monitor your credit card and bank statements closely for at least three months after staying at hotels, especially in Europe and Asia.
3. Consider using virtual credit card numbers for hotel bookings if your card issuer offers this feature.
4. Be cautious about what personal information you provide. Only give what is absolutely required.
5. If a hotel contacts you asking to verify personal or payment information, call them back using a number you find independently, not one provided in the message. For long-term protection when traveling, sign up for transaction alerts from your bank so you are notified immediately of any charges. Consider using a credit monitoring service that alerts you to suspicious activity. Remember that you have limited control over how hotels protect their systems, but you can control how you pay and how closely you monitor your accounts afterward.