Overview

• Check Point documented a 57% rise in newly created malicious or suspicious domains mimicking popular vacation rental platforms during the first half of 2025.
• Global digital tourism, which generates over €800 billion annually, faces substantial economic risk as average losses per user can exceed several hundred euros.
• Attackers use fake payment forms, fraudulent login pages and phishing emails to harvest credit card details and host credentials on cloned Airbnb and Booking.com interfaces.
• Generative AI tools are enabling cybercriminals to vary email content and button labels, making phishing campaigns harder to identify.
• Experts recommend booking only through official sites, manually verifying URLs, enabling multifactor authentication, using VPNs on public Wi-Fi and installing endpoint security on all devices.