Fake Booking.com emails and BSODs used to infect hospitality staff Suspected Russian attackers are targeting the hospitality sector with fake Booking.com emails and a fake “Blue Screen of Death” to deliver the DCRat malware. The malware delivery campaign starts with phishing emails that feature room charge details in euros, which means that European organizations are likely targets. But, according to Securonix researchers, the attackers’ are more than capable of adapting the campaign to target other industries. The campaign The attackers are sending out emails impersonating Booking.com: The fake Booking.com email (Source: Securonix) The “See Details” button/link in the fake reservation cancellation alert directs victims to a clone of the legitimate Booking.com site. JavaScript on the site…