The organized scammer network Telekopye has recently expanded its operations to target users of popular accommodation booking platforms such as Booking.com and Airbnb, according to researchers at ESET. This network, known for its sophisticated phishing tactics, has increased the level of their victim selection and is now focusing on these two major booking sites.
Telekopye, which operates as a Telegram bot, facilitates online marketplace scams for various scam groups with thousands of members. These scammers, referred to as Neanderthals, do not require much technical knowledge as the toolkit takes care of everything efficiently. The booking scams orchestrated by Telekopye started gaining momentum in 2024, with a significant increase in July followed by consistent activity in August and September.
The rise of online marketplaces has attracted fraudsters who are targeting unsuspecting buyers and sellers in search of valuable credit card information. The timing of these booking scams during the summer holiday season adds to the vulnerability of individuals seeking accommodation, making them more susceptible to falling for these fraudulent schemes.
The newer scams, which have garnered approximately half the detection numbers of marketplace variants, primarily target Booking.com and Airbnb. Scammers adopt a new approach by sending emails to targeted users, claiming payment issues with their booking and directing them to a fake webpage that mirrors the legitimate platform. By using compromised accounts of legitimate accommodations, scammers personalize the information to match real bookings made by the victims, making it harder to detect the scam.
Radek Jizba, an ESET researcher, highlights the importance of verifying the authenticity of websites before entering any personal information related to bookings. He warns users to be cautious of external URLs that prompt payment, as they could be indicators of potential scams. In late 2023, authorities in the Czech Republic and Ukraine conducted joint operations to apprehend numerous cybercriminals associated with Telekopye, seizing millions of euros in illicit gains.
The continuous evolution of Telekopye and its expansion into targeting major booking platforms emphasize the need for users to remain vigilant when engaging in online transactions. As fraudsters become more sophisticated in their techniques, it is crucial for individuals to exercise caution and verify the legitimacy of websites to protect themselves from falling victim to such scams.