RevengeHotels__2019__RevengeHotels_cybercrime_targeting_hotel_front_desks_worldwide.pdf

RevengeHotels is a targeted cybercrime campaign against hotels and hospitality providers that uses spear-phishing with malicious documents to deliver RATs (including RevengeRAT and ProCC). The operation involves two groups with shared infrastructure, aims to steal credit card data from hotel front desks and OTAs, and markets stolen access; victims span several countries, with activity documented since 2015 and a notable surge in 2019.