Representative ImageAirline loyalty accounts are being sold on the dark web for as little as 56p, according to new research by NordVPN and Saily. The study highlights a thriving market for stolen air miles, with Emirates and British Airways among the most affected airlines. Cybercriminals exploit stolen logins, often obtained through data breaches, to book flights and hotels using loyalty points, leaving victims locked out of their accounts.
The research examined dark web listings and forum discussions related to airline cybercrime. Emirates was the most-mentioned airline, with British Airways also frequently appearing. Stolen accounts, containing hundreds of thousands of miles, are advertised for prices ranging from 56p to £150, depending on the account details available.
The study also found that hotel loyalty schemes face similar threats. Leaked customer databases from major hotel chains, including Hilton and Marriott, are sold for up to £2,250. This poses a significant risk to frequent travellers, especially during busy travel periods.
Marijus Briedis, Chief Technology Officer at NordVPN, stated, "The travel industry is a lucrative target for hackers due to the sensitive personal and financial data they handle." He advised consumers to strengthen their account security by using strong, unique passwords and enabling multi-factor authentication.
As travel increases, particularly with upcoming events like the Winter Olympics, the risk of cybercrime grows. Travellers are urged to remain vigilant and protect their accounts to avoid falling victim to these schemes.
```
