Story perspectives

RevengeHotels Hackers Target Latin American Hotels with AI

9/18/2025

39 8

Summary

Story summary

The hacker group RevengeHotels (TA558) has increased attacks on hotels in Brazil and Spanish-speaking countries, leveraging AI for phishing campaigns.
They use VenomRAT, a remote access trojan that steals payment card data and controls infected systems.
Phishing emails often masquerade as invoices or job applications, targeting hotel staff.
Recent campaigns utilize AI-generated code, improving structure and cleanliness.
RevengeHotels has expanded operations to Argentina, Chile, and Mexico, frequently changing domains and payloads to avoid detection.

1 of 1

Story summary

The hacker group RevengeHotels (TA558) has increased attacks on hotels in Brazil and Spanish-speaking countries, leveraging AI for phishing campaigns.
They use VenomRAT, a remote access trojan that steals payment card data and controls infected systems.
Phishing emails often masquerade as invoices or job applications, targeting hotel staff.
Recent campaigns utilize AI-generated code, improving structure and cleanliness.
RevengeHotels has expanded operations to Argentina, Chile, and Mexico, frequently changing domains and payloads to avoid detection.