loading.. Please Wait
Dear Partner,
We are reaching out as part of our commitment to keeping your business and your guests safe.
Recently, we received a report from a MAPRO client who experienced unauthorized access to their Booking.com account. In this incident, a malicious actor sent fraudulent messages to guests, directing them to a fake website to collect credit card information under the excuse of verifying their payment information to secure their booking. We have also been informed of a similar case involving a property manager using Hostaway.
While we have found no indication that this breach originated from MAPRO, the fact that multiple systems are being targeted suggests a broader phishing campaign aimed at vacation rental operators.
Out of an abundance of caution, we strongly urge all our clients to enable the Two-Factor Authentication (2FA) on all connected sales channels, including:
2FA provides an extra layer of protection by requiring a second form of identification before granting access to your accounts, greatly reducing the risk of unauthorized logins.
Review your browser extensions
Browser extensions can be a great productivity tool, but they can also become a security issue. Browser extensions may have access to all web pages you access, as well as form data (including login forms). They may contain malicious code intended to steal user credentials and cookies from websites you visit, allowing scammers to impersonate your account in sales channels.
We recommend you review your browser extensions and remove all extensions you no longer use, as well as extensions from sources you do not trust. For more information, please review this article.
Phishing attacks like these are becoming more sophisticated and widespread. If a malicious actor gains access to your sales channel account, they can communicate directly with your guests, damaging your reputation, creating financial liability, and violating platform policies.
Check here how to enable the Two-Factor Authentication (2FA):
If you need assistance with other channels or want to review best practices for account security, our team is here to help. Please don’t hesitate to reach out to our support specialists.
Thank you for your attention to this matter and for your continued trust in MAPRO.
Stay safe,
MAPRO Security Team
www.mapro.io | support@mapro.zendesk.com
