RevengeHotels is a targeted cybercrime campaign that has been active since 2015, primarily targeting hotels, hostels, and tourism companies. The threat actor uses remote access Trojan malware to infiltrate hotel front desks and steal credit card data from guests and travelers. The campaign has impacted hotels in multiple countries, including Brazil, Argentina, Chile, and Mexico. The threat actor employs social engineering techniques and sells credentials from infected systems to other cybercriminals for remote access.
Executive Summary
RevengeHotels is a cybercrime campaign active since 2015, targeting hotels in Latin America to steal credit card data and sell system credentials on the dark web.
Goals & Targeting
The primary goal of RevengeHotels is monetary gain through data theft. They target the hospitality sector, particularly hotels in Latin America, due to their accessible payment systems. Their victims are often mid-sized to large hotels with less sophisticated security measures.
Enhanced Description
RevengeHotels operates by compromising hotel front desk systems using remote access Trojans (RATs) via social engineering campaigns. The malware harvests credit card information from guests and is known for selling stolen credentials to other cybercriminals. Its campaigns have affected multiple countries, including Brazil and Argentina.
Key Capabilities
MITRE ATT&CK Tactics
ATT&CK Techniques
Software / Tooling
Campaigns & Victims
RevengeHotels has demonstrated persistence over years, focusing on hotel systems. They sell stolen data in dark web markets and adapt tactics to target specific system vulnerabilities.
IOC Patterns
Recommended Actions
Suggested Tags
Confidence Assessment
Confidence level is moderate due to detailed descriptions of TTPs but limited specifics on exact tools and techniques. Data gaps include precise attack vectors beyond social engineering.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
0
Tactics