Kaspersky: RevengeHotels checks back in with AI-coded malware

Kaspersky has raised the alarm over the resurgence of hotel-hacking outfit "RevengeHotels," which it claims is now using artificial intelligence to supercharge its scams. Between June and August this year, Kaskersky Global Research and Analysis Team (GReAT) found the group deploying malware with AI-generated code, making its intrusions harder to detect and far more effective. The core playbook remains familiar: phishing emails, disguised as booking requests or job applications, land in the inboxes of hotel staff. Once opened, they deliver a remote access trojan known as VenomRAT, giving attackers control of the infected machine and a path to guests' card data and other personal details. While the social engineering may be old-school, the malware's AI-crafted underpinnings represent a troubling leap in sophistication, Kaspersky says. "Cybercriminals are increasingly using AI to create new tools and make their attacks more effective. This means that even familiar schemes, like phishing emails, are becoming harder to spot for a common user," said Lisandro Ubiedo of Kaspersky's GReAT team. "For hotel guests, this translates into higher risks of card and personal data theft, even when you trust well-known hotels." The Russian cybersecurity firm says that Brazil has so far borne the brunt of the latest wave of RevengeHotel attacks, but notes that incidents have already surfaced elsewhere. The group's use of AI-generated code marks a shift from RevengeHotels' previous campaigns, whi...