Cybercriminals are increasingly targeting Airbnb accounts, SlashNext warned on Wednesday, revealing that there’s a growing market for stolen Airbnb credentials on cybercrime forums.
In a blog post, SlashNext described Airbnb as a “favorite target for criminals.”
“At the time of writing this blog post, there are thousands of Airbnb accounts available for purchase… Shockingly, the large number of stolen accounts has devalued each account to just one dollar,” SlashNext said.
How Criminals Breach Airbnb Accounts
Cybercriminals often use info-stealing malware to access the Airbnb credentials of their targets.
“Stealers can be deployed through a variety of different techniques, including social engineering, exploiting software vulnerabilities, malvertising, and more,” the blog post explained. Cybercriminals are coming up with innovative ways to spread steals.
In March, CloudSEK researchers reported that threat actors are using AI-generated videos to spread info-stealing malware on YouTube by directing viewers to click malicious links in their video descriptions.
Sometimes, cybercriminals spread malware using bots. Bots are automated programs designed to carry out specific tasks, often malicious. These tasks can range from collecting user data to distributing malware, allowing criminals to automate and scale their cyberattacks.
According to SlashNext, there’s a market for stealers and bots on dark web marketplaces and private messaging apps like Telegram.
“Cybercriminals who are willing to invest money can approach a bot seller or shop and start deploying their stealer on thousands, or even tens of thousands of devices, right away,” the blog post revealed.
Besides stealing Airbnb credentials, stealers also collect cookies from the browsers of their targets.
“Cookies are small data files stored on a user’s device that contain information about their browsing activity and preferences on a particular website,” the report said. By exploiting browser cookies, cybercriminals can gain access to their targets’ Airbnb accounts without triggering alarm bells on the platform.
Protecting Your Airbnb Account
When they gain access to Airbnb accounts, cybercriminals can sell these accounts online.
The sale of Airbnb accounts is so widespread that cybercriminals also sell programs known as “account checkers,” which go through the stolen Airbnb credentials and ensure they’re working.
With stolen credentials, unauthorized individuals can log into Airbnb accounts to book properties and perform other unauthorized actions. According to SlashNext, pages advertising stolen Airbnb accounts have “received thousands of views and hundreds of replies,” indicating significant interest in them.
“Cybercriminals also offer services that provide up to 50% discount on Airbnb bookings,” SlashNext said.
It’s not uncommon for cybercriminals to trade in stolen credentials of in-demand accounts online.
In June, Group-IB researchers found over 100,000 ChatGPT credentials on sale on the dark web. These credentials were also swiped using info-stealing malware.
We recommend protecting your Airbnb account with a secure password and enabling two-factor authentication. Also, use a secure VPN like NordVPN to prevent hackers from tracking you online.
To learn more about how to keep your credentials and other personal data from threat actors, read our guide to staying safe online.
For more security news, follow us on X (Twitter), Threads, and Mastodon!
