Planning your summer trip? You’re not alone—millions of people book their travel online every year. But here’s the catch: cybercriminals are trying to trick travelers with fake Booking.com sites, and it’s easier to fall for than you might think. According to cybersecurity experts at Malwarebytes, these scams are showing up all over the internet, and they’re targeting people just like you who are looking for deals.
What’s Happening?
Hackers are putting fake links on gaming sites, social media, and even in ads. These links take you to fake Booking.com websites that look pretty convincing.
Once you’re there, you might see a CAPTCHA—those “check the box to prove you’re human” things. But this one is fake. When you click it, it secretly copies dangerous code to your clipboard.
After that, the site tells you to paste something into your computer’s Run box. If you do this, you could infect your device with malware.
Not Your Usual Warning
If you’re using Chrome, you might see a warning, but it’s not very clear.
If you have Malwarebytes’ Browser Guard installed, you’ll get a better warning.
Take this seriously! If you see any message telling you to run something on your computer—don’t do it!
What’s the Danger?
The sneaky code looks complicated, but it’s just a disguised command that downloads and runs a virus.
If this runs, it silently installs something called AsyncRAT, a tool hackers use to control your device from a distance.
With AsyncRAT on your computer, cybercriminals can:
- Steal your personal info
- Watch what you do online
- Get access to your passwords or bank info
Known Fake Websites to Avoid
Here are some scam websites pretending to be Booking.com. Avoid clicking links with any of these:
booking.chargesguestescenter[.]com
booking.property-paids[.]com
booking.rewiewqproperty[.]com
bkngnet[.]com
(…and many more)
How to Stay Safe
Here are some simple steps to protect yourself when booking travel online:
Don’t trust CAPTCHA prompts asking you to copy or run anything.
Use a good anti-malware program that blocks fake websites.
Install a browser extension like Malwarebytes Browser Guard to catch scams.
Be cautious with pop-ups and download prompts. Legit sites won’t ask you to run commands on your computer.
Avoid clicking suspicious ads or social media posts for travel deals.
If you’re really cautious, disable JavaScript in your browser for unknown websites (though this might break some sites).
