Cyber/physical perils in hospitality

April 2019 Editor's Choice, Cyber Security, Entertainment and Hospitality (Industry)

Most of us wait all year for our annual vacation. In all likelihood, it will be either a time relaxing at home with loved ones or embarking on a trip to an idyllic location. Although technology has seemingly made travel and accommodation planning a lot easier, many people are finding out that they are under more stress than during the Internet-free days.

Although, in the not so distant memory, there were cases of arriving at a dodgy destination, most vacationers returned to trusted venues and used reputable travel agencies. In the past, securing your home while you were away entailed arranging a house sitter, setting certain lights to a timer, having your mail collected regularly and asking trusted neighbours to keep an eye on the place.

Today we face a world of unscrupulous scam artists, cons, fake websites and the like, all trying their utmost to fleece us from our hard-earned money. How can we prepare for our holidays and avoid becoming the victim of a scam or data breach?

• When doing an Internet search, beware of third-party websites or being redirected to another site.

• Fraudulent call centres and websites often claim to be official representatives of hotels and airlines. This can lead to a wrong booking, hidden costs or a worst-case scenario, no reservation at all.

• Preferably book through the hotel’s official website. Type in the URL rather than clicking on a link. Should you have to use a third-party site, confirm with the hotel that they are indeed affiliated.

• Confirm that your choice of hotel/resort has adequate privacy and data protection policies in place. Credit card details of guests are normally kept on file for additional charges incurred and these make attractive targets for hackers and the like.

• Does the establishment have a secure computer and Wi-Fi network?

• Free Wi-Fi + thousands of users + latest technology = a recipe for having your data breached.

• Make use of a VPN (although not 100% safe) if you will be accessing sensitive information. Remember, DarkHotel malware is still doing the rounds and it is a very cunning piece of malware, able to track you around the world and hiding itself if it considered it had been detected. The Marriot Hotel Group were recently breached via their Starwood guest register database, leaking the personal details of over 500 million clients.

• Never leave devices unattended in hotel rooms. Magical elves do not make up the room, humans do.

• Familiarise yourself with foreign immigration laws. Certain countries have laws that allow your devices to be inspected and if need be, all your data copied.

• Encryption, VPN and certain websites are banned in some countries, jail terms can apply.

• Do not announce your travel plans on social media, this not only opens you up to cybercrime, but physical robbery at your home and even your holiday venue. Post your photos when you get back.

What can be done to protect you and your devices?

• Take the minimum devices needed and secure those left at home.

• Disable Bluetooth (even your vehicle/rental) and your home Wi-Fi.

• Disable auto-connect functions and let devices ‘forget’ SSIDs in their lists.

• Remove/configure geolocation and photo options.

• Configure/disable apps that do not need to have access to your devices.

• Use strong passwords, preferably 2FA (two-factor authentication).

• Back up all your data.

• If in doubt about a Wi-Fi connection, revert to mobile data. Not cheap on consumption, but safer.

• Only visit websites offering https://, even though this is not totally safe nowadays.

• Ensure all devices are running the latest OSs. Windows 10 needs the latest Defender.

• Before departing, charge all your devices fully and have back up power sources. A multi-adaptor is essential if visiting foreign countries.

• Should you purchase any electronics (especially from those cheap Asian countries), be sure to check them out on your return as most have built in spyware, etc.

• Change your passwords again on your return.

On a personal safety note:

• Before embarking to your destination, be it local or foreign, check out government travel warnings regarding both country and location.

• What surveillance systems does your proposed destination have in place? Physical security, CCTV cameras or both?

• What tested reaction plans do they have in place in the event of an incident. Are there medical facilities on-site or in the vicinity?

• Are there tourist police available who speak your language and who are less likely to be corrupt?

• Are there crowd control measures in places for popular venues, e.g. theme parks, sports stadiums, concert venues, beaches, etc?

• Do an online search of your location, checking for complaints, past incidents, resolution to issues, etc.

If you have managed to do all the above, then you really need a holiday.

For more information contact Wolfpack Information Risk, +27 11 794 7322, [email protected], www.wolfpackrisk.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cybereason expands presence across sub-Saharan Africa
News Cyber Security
Cybereason has appointed Chantél Hamman as its new channel director focused on growing the company’s presence across sub-Saharan Africa.

Read more...
Look before you leap into a back-up power solution
Editor's Choice Security Services & Risk Management
Before you rush into purchasing a back-up power solution, you need to take a considered and long-term view of how to get yourself as close to grid independence as possible.

Read more...
Cyber resilience is more than security
Industrial (Industry) Cyber Security IT infrastructure
Kate Mollett, regional director at Commvault Africa advises companies to guard against cyberattacks in the shipping and logistics sector using an effective recovery strategy.

Read more...
The house wins with Ajax
Elvey Security Technologies Perimeter Security, Alarms & Intruder Detection Entertainment and Hospitality (Industry)
One of the largest hotel-and-casino complexes in South Africa’s North West province needed to increase security on its perimeter, but due to the sheer extent of the site, it was deemed extremely difficult ...

Read more...
All-mobile people management solution with facial recognition
Editor's Choice Integrated Solutions Security Services & Risk Management Products
The new mobile Incident Desk People Management platform with facial recognition combines identification data on suppliers, staff, sub-contractors and even people on watch lists, for less than the cost of traditional service management tools.

Read more...
Passion, drive and hard work
Technews Publishing Editor's Choice CCTV, Surveillance & Remote Monitoring Security Services & Risk Management
Colleen Glaeser is a leader in the security market, having made her mark in the male-dominated security industry through determination and hard work, along with a vision of making the world a safer place.

Read more...
Are you your insider threat?
Technews Publishing Editor's Choice Security Services & Risk Management Commercial (Industry)
Insider threats are a critical aspect of risk management today, but what happens when it is the owner of the company acting fraudulently and making sure none of his staff can catch him?

Read more...
Preventing cyberattacks on critical infrastructure
Industrial (Industry) Cyber Security
Cyberattacks have the potential to disrupt our lives completely, and in instances where critical national infrastructure is attacked, they could disrupt the country’s entire economy, leading to loss of life and livelihoods.

Read more...
Cybersecure surveillance cameras
HiTek Security Distributors News CCTV, Surveillance & Remote Monitoring Cyber Security
Provision-ISR builds customer trust and opens up new opportunities with Check Point Quantum IoT Protect Firmware built into Provision-ISR cameras.

Read more...
R60 per month per camera for cloud AI
Iris AI Editor's Choice
Snap Guard offers homes and small businesses an easy, low-cost cloud AI service that is self-managed but can also be linked to armed response services.

Read more...