Latest national scam more sophisticated and 'just the tip of the iceberg'
A cybersecurity expert says scammers are using fear and "weaponising urgency", as holiday-makers and hotels in Western Australia's Kimberley are caught up in a global data breach.
The breach, involving third-party booking provider RMS, saw hackers access names, booking information and contact details from across the country.
Cameron Craig received a WhatsApp message regarding his upcoming booking at Cable Beach Club in Broome last week.
The WhatsApp message sent to Cam Craig regarding his upcoming booking was a phishing scam. (Supplied: Cam Craig)
The Sydney resident said the text requested him to provide his payment details through a link, or risk losing his booking.
"I work in tech, so I'm pretty savvy towards scams, but because it had some authentic details I thought it could be real,"
he said.
The message included details including the correct dates of his planned trip and his full name.
Mr Craig said he clicked on the link and entered some of his credit card information but the session timed out.
Cam Craig has been travelling to different destinations around Australia with his son. (Supplied: Cam Craig)
He later realised the message was sent by an international number and the reservation code was different.
Mr Craig said he alerted Cable Beach Club, which then notified guests.
The resort has been contacted for comment.
More Kimberley hotels impacted
Kimberley Accommodation Group, which also uses RMS Cloud as its third-party reservation system, received reports from guests who had received similar phishing messages.
Managing director Dannielle Hart said hackers used genuine booking details and asked customers to confirm card details or make a payment.
Kimberley Accommodation Group owns venues across the region including the Kimberley Hotel in Halls Creek. (Supplied: Facebook)
Ms Hart said the company was not able to comment on the number of customers impacted, or any customer financial losses at this stage.
"Our advice to guests is not to respond to unexpected messages, click links, provide card details or make payments in response to communications about their booking," she said.
RMS confirmed the unauthorised activity identified within the RMS environment had been contained yesterday.
The provider said investigations were continuing as it assessed the full scope and impact of the incident.
Chief executive Adam Seskis said scams had become "increasingly sophisticated" in a statement, but confirmed credit card and payment details were not involved in the breach.
Evolving scams
Cybersecurity lecturer Brianna O'Shea said phishing scams had evolved over time to become more convincing.
"Early attempts relied on generic mass emails with obvious spelling errors, poorly designed fake logos and simple web links," she said.
"But nowadays these scams work because they weaponise urgency, fear and authority and trust."
Brianna O'Shea says more accommodation providers could be affected. (Supplied: Brianna O'Shea)
The Murdoch University academic said third-party systems were a "lucrative target" for hackers.
She said the breach could also have implications for FIFO workers and independent bed and breakfasts, where RMS was used to support bookings in temporary accommodation.
"This is just the tip of the iceberg," Dr O'Shea said.
"It'll be up to the owners to reach out to their customers and provide them with that support."
KioskNews shows a cleaned-up reading view extracted from the publisher’s page — the original always lives on their site, not ours.