TGTGInsighttelegram intelligenceLIVE / telegram public index
← The Hacker News
The Hacker News avatar

TGINSIGHT POST

Post #8158

@thehackernews

The Hacker News

Views10,800Post view count
PostedJan 601/06/2026, 05:29 PM
Post content

Post content

🛑 European hotels are facing a phishing campaign abusing Booking-com cancellation emails. Victims hit a fake site, see a fake blue screen, and are told to run a PowerShell “fix.” That installs DCRat via MSBuild.exe, sets Defender exclusions, and persists on the system. 🔗 Learn more → https://thehackernews.com/2026/01/fake-booking-emails-redirect-hotel.html