RevengeHotels
Description
(Kaspersky) RevengeHotels is a campaign that has been active since at least 2015, revealing different groups using traditional RAT malware to infect businesses in the hospitality sector. While there is a marked interest in Brazilian victims, our telemetry shows that their reach has extended to other countries in Latin America and beyond.
The use of spear-phishing emails, malicious documents and RAT malware is yielding significant results for at least two groups we have identified in this campaign. Other threat actors may also be part of this wave of attacks, though there is no confirmation at the current time.
Names
| Name | Name-Giver |
|---|---|
| RevengeHotels | Kaspersky |
Country
Motivation
- Information theft and espionage
First Seen
2015
Observed Sectors
Observed Countries
Tools
Information
Other Information
Uuid
e1bdf2aa-a235-4f3e-bbbe-a7e7c70de802
Last Card Change
2020-04-14