---
title: "How Hotels Leave You Vulnerable to Phishing Attacks | Phish Protection"
description: "How Hotels Leave You Vulnerable to Phishing Attacks: If you invest in phishing protection software, which you should, you probably think you"
image: "https://phishprotection.com/og/blog/how-hotels-leave-you-vulnerable-to-phishing-attacks.png"
canonical: "https://phishprotection.com/blog/how-hotels-leave-you-vulnerable-to-phishing-attacks/"
---

Quick Answer

I'll bet that when you stay at a hotel, you don't give much thought to how the hotel's vulnerability to \*\*phishing attacks\*\* can affect you. But you should. Because we live in a tightly-coupled financial ecosystem. And \_because the hospitality industry is under attack from cybercriminals\_.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fhow-hotels-leave-you-vulnerable-to-phishing-attacks%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20Hotels%20Leave%20You%20Vulnerable%20to%20Phishing%20Attacks&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fhow-hotels-leave-you-vulnerable-to-phishing-attacks%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fhow-hotels-leave-you-vulnerable-to-phishing-attacks%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fhow-hotels-leave-you-vulnerable-to-phishing-attacks%2F&title=How%20Hotels%20Leave%20You%20Vulnerable%20to%20Phishing%20Attacks "Share on Reddit") [ ](mailto:?subject=How%20Hotels%20Leave%20You%20Vulnerable%20to%20Phishing%20Attacks&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fhow-hotels-leave-you-vulnerable-to-phishing-attacks%2F "Share via Email") 

![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/12/anti-phishing-software-7357.jpg) 

_If you invest in phishing protection software, which you should, you probably think you’re safe from phishing attacks_. It would be nice if that were true, but it’s not. Unfortunately, we live in a tightly-coupled financial ecosystem where vulnerability to one of us is a vulnerability to all.

I’ll bet that when you stay at a hotel, you don’t give much thought to how the hotel’s vulnerability to **phishing attacks** can affect you. But you should. Because we live in a tightly-coupled financial ecosystem. And _because the hospitality industry is under attack from cybercriminals_.

![Anti phishing software](https://media.mailhop.org/phishprotection/images/2019/12/anti-phishing-software-7357.jpg) 

According to an [article](https://www.securityweek.com/cybercrime-campaign-targeting-hospitality-sector-intensifies) on the Security Week website titled **_Cybercrime Campaign Targeting Hospitality Sector Intensifies_**, “The activity associated with a cybercrime campaign targeting hospitality companies has intensified this year. Referred to as RevengeHotels and active since 2015, the campaign targets hotels, hostels, hospitality and tourism companies to steal credit card information from hotel management systems and data received from popular online travel agencies such as Booking.com.”

Kaspersky has [confirmed](https://securelist.com/revengehotels/95229/) that more than 20 hotels are victims of the latest exploits by two groups, RevengeHotels and ProCC. The article on Secure List goes on to say that “_One of the tactics used in operations by these groups is highly targeted spear-phishing messages_. They register typo-squatting domains, impersonating legitimate companies. The emails are well written, with an abundance of detail.”

The strange thing is, these attacks are not particularly novel. They use emails carrying malicious Word, Excel or PDF attachments and domain-spoofed embedded links. These are the exact types of exploits that are easily detected and blocked by [phishing protection software](/).

![Email phishing protection](https://media.mailhop.org/phishprotection/images/2019/12/email-phishing-protection-7357.jpg) 

**Cloud-based phishing protection** software with [Advanced Threat Defense](/products/advanced-threat-defense/), like that from [PhishProtection.com](/), is perfectly situated to stop these attacks. Because it sits between the email sender and email recipient, cloud-based Phish Protection has the opportunity to scan the emails for any kind of malicious content. And when it discovers any, it prevents the email from reaching the intended victims inbox. In other words, _it’s not even possible for someone to get phished because they never see the threatening email_.

The big question that needs to be asked is, why aren’t more hotels protecting themselves from **phishing attacks** with this technology? Perhaps on hotel review websites like [TripAdvisor](https://www.tripadvisor.com/) they can start including information about the cybersecurity infrastructure in place at hotels so guests can make more informed reservation decisions.

If you work in the hospitality industry, or even if you don’t, you owe it to your customers to keep their information safe. _You owe it to your customers to be **protected from phishing** attacks_. You owe it to your customers to get Phish Protection.

## Topics

[ Phishing ](/tags/phishing/) 

![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) 

[ Brad Slavin ](/authors/brad-slavin/) 

General Manager

Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base.

[LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) 

## Protect your inbox from phishing attacks

Real-time email security with 60-day free trial. No credit card required.

[Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) 

## Related Articles

[  Foundational 5m  0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks  Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[  Foundational 4m  13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization  Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[  Foundational 4m  All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center  May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/)[  Foundational 4m  2021 Phishing Trends You Need To Be Wary Of  Aug 2, 2021 ](/blog/2021-phishing-trends-to-be-wary-of/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"How Hotels Leave You Vulnerable to Phishing Attacks","description":"How Hotels Leave You Vulnerable to Phishing Attacks: If you invest in phishing protection software, which you should, you probably think you're safe from.","url":"https://phishprotection.com/blog/how-hotels-leave-you-vulnerable-to-phishing-attacks/","datePublished":"2019-12-12T07:16:34.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2019-12-12T07:16:34.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/how-hotels-leave-you-vulnerable-to-phishing-attacks/"},"articleSection":"foundational","keywords":"Phishing","wordCount":448,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2019/12/anti-phishing-software-7357.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"How Hotels Leave You Vulnerable to Phishing Attacks","item":"https://phishprotection.com/blog/how-hotels-leave-you-vulnerable-to-phishing-attacks/"}]}
```