Spyware detected on US hotel check-in computers

A consumer spyware application was found running on the check-in systems of at least three Wyndham hotels in the United States, TechCrunch has learned.

The app, called pcTattletale, stealthily and continuously captured screenshots of hotel reservation systems, which contained guest details and guest information. Thanks to a security flaw in the spyware, these screenshots are available to everyone on the Internet, not just the intended users of the spyware.

This is the most recent example of consumer spyware exposing sensitive information due to a security flaw in the spyware itself. This is also the second known time that pcTattletale has exposed screenshots of devices that have the app installed. Several other spyware apps in recent years had security bugs or configuration errors that exposed the private and personal data of unwitting device owners, in some cases prompting action from government regulators.

Customer and booking details captured and exposed

pcTattletale allows anyone controlling it to remotely view the target Android or Windows device and its data, from anywhere in the world. The pcTattletale website states that the application “runs invisibly in the background on their workstations and cannot be detected.”

But the bug means that anyone on the Internet who understands how the security flaw works can download screenshots captured by the spyware directly from pcTattletale's servers.

Security researcher Eric Daigle told TechCrunch he found hotel check-in systems compromised as part of an investigation into consumer spyware. These apps are often referred to as “stalkerware” because of their ability to be used to track people, including spouses and domestic partners, without their knowledge or consent.

Daigle said he attempted to alert pcTattletale about the issue, but the company did not respond and the flaw remained unpatched at the time of publication. Daigle disclosed limited details about the pcTattletale screenshot bug leak in a short blog post, without providing details so as not to help bad actors take advantage of the flaw.

Daigle said pcTattletale periodically takes new screenshots of the device the app is running on, sometimes every few seconds.

Screenshots of two Wyndham hotels, seen by TechCrunch, show guests' names and booking details on a web portal provided by travel tech giant Sabre. Screenshots from web portals also show partial customer payment card numbers.

Another screenshot showed access to a third Wyndham hotel's check-in system, which at the time was connected to the Booking.com admin portal used to manage a guest's reservation.

It is unclear who installed the app or how the app was installed, for example, whether hotel employees were tricked into installing it or whether the hotel owner intended to use spyware to monitor employee behavior. pcTattletale presents itself as a way to monitor employees, among other uses.

The manager of one affected hotel told TechCrunch by phone that he was unaware the spyware was taking screenshots of their check-in computer. Managers of the other two hotels did not respond to calls or emails from TechCrunch. TechCrunch is not naming specific hotels given the risk of retaliation against hotel employees.

Wyndham spokesperson Rob Myers told TechCrunch in an email: “Wyndham is a franchise organization, meaning all of our hotels in the United States are independently owned and operated. » Wyndham would not say whether it was aware that pcTattletale was used on front-desk computers at its branded hotels or whether use of pcTattletale was approved by Wyndham's own policies.

Booking.com told TechCrunch that its own systems were not compromised by the spyware, but that this case appeared to be an example of how hotel systems are targeted by cybercriminals to gain access to hotel accounts.

“Some of our hosting partners have unfortunately been targeted with very convincing and sophisticated phishing tactics, tricking them into clicking on links or downloading attachments outside of our system that allow malware to load on their machines and, in some cases, lead to unauthorized access to their Booking.com Account,” said Angela Cavis, spokesperson for Booking.com. “These bad actors then attempt to impersonate the partner (or even Booking.com) sometimes in a very convincing manner to request payment from customers outside of the policy in their booking confirmation.”

BBC News reported last December that cybercriminals had gained access to the administrative portals of individual hotels using Booking.com. Using this access, the criminals then sent messages to guests from the company's app to trick them into paying themselves instead of the hotel.

It's unclear whether pcTattletale or other spyware is linked to previous incidents, and Booking.com said it was investigating.

“All slopes covered”

There is a long history of stalkerware applications that ostensibly market themselves for legitimate uses. Tracking your own children is legal in the United States, but also promotes, or outright asserts, that apps can be used to target people without their knowledge, often spouses and domestic servants. partners, which is illegal.

pcTattletale is sold under the guise of child and employee monitoring software, but the company also promotes its app for use against “spouses who fear their partner is cheating.”

A screenshot of pcTattletale's member portal, which allows users to download its monitoring application which “users will not know pcTattletale is installed and running.” Image credits: TechCrunch (screenshot)

pcTattletale develops spyware apps for Android and Windows and both apps require physical access to a target's device to install. pcTattletale provides its Windows spyware application as a one-click download that can be installed in seconds, according to TechCrunch's own spyware testing and analysis.

pcTattletale also offers a service called “We Do It For You,” which the company says will help install the spyware on the target's computer on the customer's behalf.

“We installed pcTattletale on their Windows computer for you. Just choose a time,” the pcTattletale website tells customers on its member portal. “You will receive an email with instructions to allow us access to their computer. It takes us about 10 minutes. No trace left. All slopes covered. The customer then receives a link “for our technician [sic] to access the computer.

Bryan Fleming, who founded and runs pcTattletale, did not respond to TechCrunch's request for comment.

To contact this journalist, contact Signal and WhatsApp at +1 646-755-8849, or by email. You can also send files and documents via SecureDrop.

Sources 1/ https://Google.com/ 2/ https://techcrunch.com/2024/05/22/spyware-found-on-hotel-check-in-computers/ The mention sources can contact us to remove/changing this article

What Are The Main Benefits Of Comparing Car Insurance Quotes Online

LOS ANGELES, CA / ACCESSWIRE / June 24, 2020, / Compare-autoinsurance.Org has launched a new blog post that presents the main benefits of comparing multiple car insurance quotes. For more info and free online quotes, please visit https://compare-autoinsurance.Org/the-advantages-of-comparing-prices-with-car-insurance-quotes-online/ The modern society has numerous technological advantages. One important advantage is the speed at which information is sent and received. With the help of the internet, the shopping habits of many persons have drastically changed. The car insurance industry hasn't remained untouched by these changes. On the internet, drivers can compare insurance prices and find out which sellers have the best offers. View photos The advantages of comparing online car insurance quotes are the following: Online quotes can be obtained from anywhere and at any time. Unlike physical insurance agencies, websites don't have a specific schedule and they are available at any time. Drivers that have busy working schedules, can compare quotes from anywhere and at any time, even at midnight. Multiple choices. Almost all insurance providers, no matter if they are well-known brands or just local insurers, have an online presence. Online quotes will allow policyholders the chance to discover multiple insurance companies and check their prices. Drivers are no longer required to get quotes from just a few known insurance companies. Also, local and regional insurers can provide lower insurance rates for the same services. Accurate insurance estimates. Online quotes can only be accurate if the customers provide accurate and real info about their car models and driving history. Lying about past driving incidents can make the price estimates to be lower, but when dealing with an insurance company lying to them is useless. Usually, insurance companies will do research about a potential customer before granting him coverage. Online quotes can be sorted easily. Although drivers are recommended to not choose a policy just based on its price, drivers can easily sort quotes by insurance price. Using brokerage websites will allow drivers to get quotes from multiple insurers, thus making the comparison faster and easier. For additional info, money-saving tips, and free car insurance quotes, visit https://compare-autoinsurance.Org/ Compare-autoinsurance.Org is an online provider of life, home, health, and auto insurance quotes. This website is unique because it does not simply stick to one kind of insurance provider, but brings the clients the best deals from many different online insurance carriers. In this way, clients have access to offers from multiple carriers all in one place: this website. On this site, customers have access to quotes for insurance plans from various agencies, such as local or nationwide agencies, brand names insurance companies, etc. "Online quotes can easily help drivers obtain better car insurance deals. All they have to do is to complete an online form with accurate and real info, then compare prices", said Russell Rabichev, Marketing Director of Internet Marketing Company. CONTACT: Company Name: Internet Marketing CompanyPerson for contact Name: Gurgu CPhone Number: (818) 359-3898Email: [email protected]: https://compare-autoinsurance.Org/ SOURCE: Compare-autoinsurance.Org View source version on accesswire.Com:https://www.Accesswire.Com/595055/What-Are-The-Main-Benefits-Of-Comparing-Car-Insurance-Quotes-Online View photos